last executing test programs: 1m6.997263768s ago: executing program 1 (id=767): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r1, 0x0, 0x3, 0xe9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) r2 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r2, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket(0x1, 0x3, 0x6) rt_sigsuspend$auto(&(0x7f0000000140)={0x10}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x6) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r3 = wait4$auto(0x0, &(0x7f0000000000)=0x7, 0x4, &(0x7f0000000040)={{0x6}, {0xdf, 0x7}, 0x1, 0x20000000000, 0x6, 0x6, 0x2, 0x6, 0x3, 0xfd00, 0x100000000, 0xc4, 0x80, 0xc4, 0x1, 0x7}) capset$auto(&(0x7f0000000100)={0xea, r3}, &(0x7f0000000140)={0x0, 0x9, 0x421}) socketpair$auto(0x180004, 0x0, 0x1, 0x0) write$auto(0x4, 0x0, 0x100082) 1m3.68716161s ago: executing program 1 (id=775): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone3(&(0x7f0000000240)={0x40000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), {0x20}, &(0x7f0000000140)=""/118, 0x9a198f5dbefddd0f, &(0x7f00000001c0)=""/5, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000140)="191cabfa3a37", 0x6) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000240), 0x10c01, 0x0) sysfs$auto(0x2, 0xd, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='[\x99}/:H\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0xfdef) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x7, &(0x7f00000001c0)="77cc34de9e4934e3c803eabdd97748c2782e53d728aac1d8eb2035fdb1fe3b649072ba5d64088d0b0a5bd93458564cf922312ac2bd3624439cfac357eb673058de20114acf23b2dd6e2383b24237df8d1b61c9e4f26d0ed6671390002218dfab360dd1ae92406b7c3731b15b80f5d12b602379ad55d3075b8169d2c6251ae15b515067741f2e68f33f786090247b1f8e92c93518851545e74dd65e1c262bb342a87e6235b2dc48b74804ec3a112ac6f126805c87b68bb28e340c8f905605663b91e57a3c4493261f08a872be064b219345b4") close_range$auto(r0, r0, 0xa69) fanotify_init$auto(0x5, 0x1) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) r4 = socket(0x2, 0x1, 0x40) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r5, 0x7aa, 0x0) r6 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r6, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r7, 0x0) sendmmsg$auto(r4, &(0x7f0000001380)={{&(0x7f00000001c0)="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", 0x2, &(0x7f00000012c0)={&(0x7f00000011c0)="c2a88815c0a7ceb88ffcad979ed305f707b2da0a03b4de7a2cdd673898b814c029968e8c64f4d60ad5771a5b2d09126327e368890b81bb812fce2fa39873f402ed5b8ca53da8cf5a65d4fd7b6708e86c7a63687054c4a7dca58f5633a3b8b72323fca3f5e2dfca45f44852af2b8ea0f5893a404fe910a347d9c142c636c2ebcbc74968e6cc1801e7e8c91d74d283b00d88a38238a9b0f536d8e97e47cbfafe8e6b253d294548747d4cf99ec22fb16c6ef7cbb827aec3c5e34437742a8856a7771ea72ea568e8f8395190554b695bcb600926ca606e8f6ff871c0", 0x70d}, 0x2, &(0x7f0000001300)="5d1c337e770d9c9bd835882f91955d21d5ab47efaffcc6378425935e0e1e8e85c6ba6a8f79d81699be0b85bd0d71d07daa6fa48c8fb3ea3dc6d7c5b9ada0a0039813b76bb93639", 0x0, 0x401}, 0x8}, 0x6, 0xf92b) 1m2.743898058s ago: executing program 1 (id=776): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = fcntl$auto(r0, 0x400, 0x1) ioctl$auto_TIOCCONS2(r0, 0x541d, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec1\x00', 0x80, 0x0) ioctl$auto_CEC_ADAP_G_PHYS_ADDR(r2, 0x80026101, &(0x7f00000001c0)=0x9ca8) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4042, 0xd3) mmap$auto(0x1, 0x73, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f00009e1000)='./file0\x00', 0x8162, 0x0) pipe$auto(&(0x7f0000000080)=r1) splice$auto(r4, 0x0, r3, &(0x7f0000002100), 0x768, 0x7) close_range$auto(0x2, 0x8, 0x2) madvise$auto(0x22, 0xffffffffffff0005, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x40e00, 0x0) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x2, 0xfffffff8, 0xfffffff7, 0x7ff, 0x1ff}, "aa555ea7954562d221c396369a62dd8ba8b17f25e22bca4a679d42065ff269d5"}) socket(0x2, 0x1, 0x106) syz_clone(0x4088000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/4/effective_affinity_list\x00', 0x3c1041, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/team0/disable_xfrm\x00', 0x15ab31fb3dd7c340, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r7, &(0x7f00000002c0)="81", 0x1) 1m1.661852932s ago: executing program 1 (id=779): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x2, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b", 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) r1 = socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x0, 0x77bed28568c43d3b, 0x70b52a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}}, 0x80) sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) ioctl$auto_TIOCSTI(r0, 0x5412, &(0x7f0000000100)=']y') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) flistxattr$auto(r4, 0x0, 0x9) 1m0.98207092s ago: executing program 1 (id=781): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0xfffffffffffffffe, 0x20000084}, 0x0) io_uring_setup$auto(0xa, 0x0) prctl$auto(0x23, 0x6, 0x2009, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) prctl$auto(0x40, 0x7, 0x0, 0x6, 0x3080000000000000) msgctl$auto_IPC_INFO(0x10000, 0x3, &(0x7f0000000100)={{0x2, 0xee01, 0xee01, 0xffd, 0x40005, 0x3, 0x8e}, &(0x7f0000000080)=0x80, &(0x7f0000000240)=0x8, 0x6, 0x7c, 0x2000006, 0x103, 0x2, 0x406, 0x4, 0x1, @raw=0xfffffff7, @raw=0x80000002}) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, r6, 0x8) socket(0x18, 0xc, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) symlink$auto(0x0, 0x0) 59.696137444s ago: executing program 1 (id=783): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) socket(0x2b, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) keyctl$auto(0x11, 0xfffffffd, 0x0, 0x0, 0x1000000000008) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) fadvise64$auto_POSIX_FADV_DONTNEED(r0, 0x9, 0x1, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0x7, 0x3, 0x1, 0x7, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2bffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 44.57348768s ago: executing program 32 (id=783): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) socket(0x2b, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) keyctl$auto(0x11, 0xfffffffd, 0x0, 0x0, 0x1000000000008) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) fadvise64$auto_POSIX_FADV_DONTNEED(r0, 0x9, 0x1, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0x7, 0x3, 0x1, 0x7, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2bffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 15.206650343s ago: executing program 4 (id=850): socket(0x2a, 0xa, 0xd276f40e) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000001100)=@in={0x2, 0x3, @multicast2}, 0x65) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xf469, 0xbc3ab41) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sg0\x00', 0x120141, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001140)='ns/uts\x00') mknod$auto(&(0x7f00000012c0)=':,\x00', 0xca, 0x6) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x23, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x8971, 0x24) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/028/001\x00', 0x208a03, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x0, r3, &(0x7f00000010c0)={0x1, 0x100000000}) ioctl$auto_USBDEVFS_SUBMITURB32(r3, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff"]) r4 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x400, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r4, &(0x7f0000001200)=""/89, 0x59) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r5, &(0x7f0000000040)=""/4096, 0xfffffe82) madvise$auto(0x0, 0xffffffffffff0001, 0x15) bpf$auto(0x12, 0x0, 0xcf) r6 = fanotify_init$auto(0x8, 0x2000000000002) getsockopt$auto_SO_BINDTOIFINDEX(r6, 0x7, 0x3e, &(0x7f0000000340)='\x00K\xe9\'\"/\xf9c\x95hF\xa9\xd8\xcd3\xaa\xac6Wm\x7f\xd9\xd5T\xc710\v\xdc\xb0l\xa8\x8b\xc3t*J\x14(,hAs\xe5g\xb3J2\x8e\x91J/\xb9\t\x012\x9f\x0e\xf9\xeeB\xc5\xd8N\xfe\xf4\xed\xf5n\xc1=\xbaj\"Y\x11\x9a\xef\x06Z\nB2\xc3\x89ko\x1a/:\xacz\xbd\xc4\xc83\xd2\xfd\xddh\x15U\xbd;\xf9\x92%\xaei<\xf8z^\xd1\xb1Bf\xfbQ\xf9\xab\fW\xc4\xa6\xb2\xe8\x15O\xc7\x13\xad', &(0x7f0000000400)=0x6) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5') 13.419640188s ago: executing program 2 (id=855): r0 = creat$auto(&(0x7f0000000080)='./file0\x00', 0x6) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x0, 0x0, 0xf) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0x9, 0x8fd6, 0x2, 0x61c5, 0x15f4da0a, 0x53000000000000, 0x7, 0xa, 0x7fffffff, 0x7, 0x1, 0xa6ca, 0x1, 0x1]}, 0x0) close_range$auto(0x2, 0x8, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8040) ioctl$auto_SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)="7040efb7") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r0) 11.695341587s ago: executing program 0 (id=856): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)=[0xfff, 0x2688]) mmap$auto(0x2000, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) mlockall$auto(0x800000000000005) mmap$auto(0x0, 0x20009, 0x4, 0x10, 0xffffffffffffffff, 0x8002) socket(0x21, 0x1, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf251200000005000c00ff0000000a00010000000000d4a419007dba6907273140a43172cc0f5945474437143f69a5777674364501bd4661e84d7eeab5f94717d98d0624f33f803fbd6a756bebd8e1f84dc9170d"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x60b03, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(r0, 0x8, 0x0) r2 = socketcall$auto(0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) prctl$auto_PR_SET_SECCOMP(0x16, 0x1, 0xc, 0x5, 0x3) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0xa, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x106, 0x24f}, 0x7fd}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f0000000100)={"b1ec2b3d73eb3704600008fde7f9a86cba53ec92136c2cb4ea07c3ff554fd857", 0x5, 0xffffff65, 0x0, 0xa, 0x1040, 0xffffffffffffffff}) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f0000000040)={0xe1, 0x0, [{0x80, 0x1, 0x5}, {0xa4a, 0x1, 0x100}]}) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)="000004") openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 11.680530608s ago: executing program 4 (id=857): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0xfffe) io_uring_setup$auto(0xa, 0x0) prctl$auto(0x23, 0x6, 0x2009, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) prctl$auto(0x40, 0x7, 0x0, 0x6, 0x3080000000000000) msgctl$auto_IPC_INFO(0x10000, 0x3, &(0x7f0000000100)={{0x2, 0xee01, 0xee01, 0xffd, 0x40005, 0x3, 0x8e}, &(0x7f0000000080)=0x80, &(0x7f0000000240)=0x8, 0x6, 0x7c, 0x2000006, 0x103, 0x2, 0x406, 0x4, 0x1, @raw=0xfffffff7, @raw=0x80000002}) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, r6, 0x8) socket(0x18, 0xc, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) symlink$auto(0x0, 0x0) 10.880588473s ago: executing program 2 (id=858): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000000)="1c520b", 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x6) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = memfd_create$auto(0x0, 0x4) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={r0, 0xffffffffffffffff, 0x4, 0xae30, 0x8, 0x9, 0xffffffffffffffff, 0x6, 0x7ff}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_STATION(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES64=r4], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40004) statx$auto(r3, 0x0, 0x1000, 0xbdfc, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r7, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0xffffffffffffffff, 0x4b47, 0x1) 10.657487593s ago: executing program 4 (id=859): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x2008000}, 0x55) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/icmp6\x00', 0x8000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/215, 0xd7) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r1) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x1c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x40) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100029bd7000ffaddf2501ece75114000d00000000000c000500960000000000000005001300fa00000008ca095abbc4ac7a8408000000769df16105001a"], 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r7 = socket(0x18, 0x800, 0x2) getpeername$auto(r7, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000080)=0xa98) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'pim6reg\x00'}) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r4, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$auto_IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xf89c}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xfffffffa}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x44006}, 0x2000000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r8, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) clone$auto(0x84, 0x6, &(0x7f0000000540)=0x7, &(0x7f0000000580)=0x467, 0x5) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) 10.122474321s ago: executing program 0 (id=860): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto_PR_SET_MM(0x23, 0x2, r0, 0xa, 0x0) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r1, 0x41015500, &(0x7f0000000040)={"24df202c52ce582a0a73bfa704878a246fc33219c75577639801c6106a8e786529a4668e21e8a9b2817530ce1fb4fc2d102c736b89a415c7a183eb07f8030b22835fbd9fdb3fa90ce8da218a0e3e3eb7c4233804196028f833e45ebe85d7e729aa777a271084f6dd7ddc988b016d23da37264de075c0e1abe160d263351db601", "b0b113fa57b34e83551e4e9ee15f25d3144ec0e65d8dcc1e2aa67241fb6ae0ef2da86d63d66eb3398b5d01e0249a4035ac4dfd5b1e904ba0ae329e383366547cee54863a0452c02f7f1fb7a55c8571826b00d951406d96a8338c4a923faa5cbc96e223acd4487267b584deff7d8f2bbc21d84674d5640d74c05686d77aa439f1", 0x5}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x28102, 0x0) write$auto(r3, &(0x7f0000000180)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) write$auto(r2, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop9\x00', 0xc382aa1285889839, 0x0) ioctl$auto_BLKGETNRZONES(r4, 0x80041285, &(0x7f00000006c0)=0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0002, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) settimeofday$auto(0x0, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000380)='zG0') r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, 0x0, 0x4d) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(0x3, 0x0, 0xfff) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001900)={0x14, r7, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x8d0) 9.066787217s ago: executing program 2 (id=862): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r1, 0x0, 0x3, 0xe9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) r2 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r2, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) rt_sigsuspend$auto(&(0x7f0000000140)={0x10}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r3 = wait4$auto(0x0, &(0x7f0000000000)=0x7, 0x4, &(0x7f0000000040)={{0x6}, {0xdf, 0x7}, 0x1, 0x20000000000, 0x6, 0x6, 0x2, 0x6, 0x3, 0xfd00, 0x100000000, 0xc4, 0x80, 0xc4, 0x1, 0x7}) capset$auto(&(0x7f0000000100)={0xea, r3}, &(0x7f0000000140)={0x0, 0x9, 0x421}) socketpair$auto(0x180004, 0x0, 0x1, 0x0) write$auto(0x4, 0x0, 0x100082) 7.311542504s ago: executing program 3 (id=864): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) r1 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)) lseek$auto(r1, 0x7, 0x2) madvise$auto(0x1000, 0x400050, 0x9) ioprio_set$auto(0x3, 0x400000000000, 0x72e2f0a) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) munmap$auto(0x8000, 0xffffffff) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) mmap$auto(0xb, 0xe5, 0x1, 0x15, r0, 0x101) getsockopt$auto_SO_TXTIME(r0, 0x81, 0x3d, &(0x7f0000000000)='!}\x00', &(0x7f0000000040)=0xc22c) 6.668791459s ago: executing program 4 (id=865): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x2, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/neigh/vlan1/mcast_resolicit\x00', 0x40802, 0x0) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={@inferred=r0, 0xe14, &(0x7f00000001c0)=0x100000000, 0x0, 0x8000000000000001, 0x6, "f82c5edc9ff0d99731a5ac8981fc405f30bf9a344b8b4a1198ea7542"}) sendfile$auto(r1, r1, 0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) getsockopt$auto_SO_SNDBUF(r0, 0x1, 0x7, &(0x7f0000000040)='$(!\x1c++\x00', &(0x7f00000000c0)=0x8) r2 = socket(0x2, 0x5, 0x0) mmap$auto(0x5, 0x7, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x2001fff8}, 0x7, 0x0, 0x2, 0x4f}, 0xfff}, 0xff, 0x311) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r4 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x6, "3ab0b86fbda1df44af3122352d439752fa942a96ec6ba1b2c91c505f950692dd", @raw=0xd82}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000001440)={0xd, "edb3fe1f79fec9784d775afa38e3bdbfd95388bb3600c3bde59b00", @inferred=r4}) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0xe, 0x0, 0xf}, 0x4) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x4, 0xeb1, 0x401, 0x8000) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) sysfs$auto(0x2, 0x20000002a, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x6) mmap$auto(0x0, 0x2000f, 0x4, 0xeb1, 0x405, 0x8000) ioctl$auto_IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, 0x0) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) unshare$auto(0x40000080) socket(0x18, 0x1, 0x2) 6.454062565s ago: executing program 0 (id=866): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) wait4$auto(0xffffffffffffffff, &(0x7f0000000000)=0x8, 0x0, &(0x7f0000000100)={{0x10, 0x9}, {0x6, 0x100}, 0x8000, 0x3, 0xffffffff, 0x5, 0x6, 0x47a, 0xffffffffffffff73, 0xfffffffffffffff7, 0x3, 0x3, 0x9, 0xdb, 0x69ee, 0x3}) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x2000, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) r3 = socket(0xa, 0x1, 0x84) close_range$auto(r3, 0xfffffffffffff000, 0xfff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 6.175734941s ago: executing program 2 (id=867): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000000)="1c520b", 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x6) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = memfd_create$auto(0x0, 0x4) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={r0, 0xffffffffffffffff, 0x4, 0xae30, 0x8, 0x9, 0xffffffffffffffff, 0x6, 0x7ff}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8090000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x9b8}, 0x1, 0x0, 0x0, 0x10}, 0x20040885) statx$auto(r3, 0x0, 0x1000, 0xbdfc, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r7, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0xffffffffffffffff, 0x4b47, 0x1) 5.435089927s ago: executing program 3 (id=868): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0xf0ffff) io_uring_setup$auto(0xa, 0x0) prctl$auto(0x23, 0x6, 0x2009, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) prctl$auto(0x40, 0x7, 0x0, 0x6, 0x3080000000000000) msgctl$auto_IPC_INFO(0x10000, 0x3, &(0x7f0000000100)={{0x2, 0xee01, 0xee01, 0xffd, 0x40005, 0x3, 0x8e}, &(0x7f0000000080)=0x80, &(0x7f0000000240)=0x8, 0x6, 0x7c, 0x2000006, 0x103, 0x2, 0x406, 0x4, 0x1, @raw=0xfffffff7, @raw=0x80000002}) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, r6, 0x8) socket(0x18, 0xc, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) symlink$auto(0x0, 0x0) 4.392253413s ago: executing program 3 (id=869): mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) (async) io_uring_setup$auto(0x6, 0x0) (async) ustat$auto(0x801, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$auto(r1, &(0x7f0000000080)=@generic={0x1d, "ffffff0b000000000000000700"}, 0x13) r2 = socket(0x2, 0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0xf, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) socket(0x2, 0x1, 0x106) ioctl$auto_NS_GET_MNTNS_ID(r0, 0x8008b705, &(0x7f0000000080)=0x8) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) (async) r6 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="18000000", @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) (async) write$auto(r5, &(0x7f0000000000)='-\x00', 0x30) 4.151886236s ago: executing program 3 (id=870): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000000)="1c520b", 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x6) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = memfd_create$auto(0x0, 0x4) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={r0, 0xffffffffffffffff, 0x4, 0xae30, 0x8, 0x9, 0xffffffffffffffff, 0x6, 0x7ff}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_STATION(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES64=r4], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40004) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8090000", @ANYRES16, @ANYBLOB="00042bbd7000fcdbdf25270000000400050151009d004b953e7a641037cb641e4599a6383a46dd98d1417ec4c9f6b2f1de6d3a38f58fd5a2268aae24f9ef04d27353c5827192cdf502bac4648c9a57bd87c2bfdc9fdce56fc6ed44bae62f10302a7589000000d105b20048d2c4fa9444af5649b57f098f269b21e5cb50b1b2fe7f9175fe58b18c506a3ab981e4d25fb812d42c5a927f2bbc8e9cbba70575753492aaa312835b79cc9ba9c7c340203da9c569238d47117799e71ab0e9ce235da3e1146c13864a7a85e53595045a5cf8f13323b329b34be74c4703cc326d6c9a920ccf18dce6f1565e7147219606093625caf97a7936a1f1e4d9b475132984d354748df78b5a0b461bb535c55be29243b9346bc6473a8d1169290414b03942787d5bfab92c5f23001efd5c8c1eca28472c7fb1c3c98502a533d801bac048edde246905132980acdf519e23025ebb43f581670d5bb82961309b94216cc2c1d3e48d2bae4269db1f6358490fbb4246565227f43e4b71b533ae96335935ac7734a1aef9acd63f5bff10a186c8b5dafe99a61b6ab114471e845f60494b0b4f25e946f08430dd0cfd43e3d8d12de5cabf6ab20bcf459b107956f5c185df69077b62697222d89af0a8ad8763b22ea062a8df7f8c8f560f57b0cda81e174381f4186c080e06a13b278b331c1f454572ca9754f38721235162246e6d538978a0ca3c67d2531e228a7561f7d9a4d0bc7875401a5ec0496210237111c90224bf7e04fcd66b274472d38132ca4ae0c757baf327038473460b84b7d4479e98d3d798247aa8866939b7bd6d0ef38c2f0b19d474caa9d9a94305ed7f1d8f7f823de407ecef639ddf1dd79fa12714bdecdc9e82f31b442433b39aaaa5b727b5a1d2ad1ff30eaa7498c19a7686b793cb80d7b11dfea22925801c33e5cbcf31a2372b35ecafca026b196e303486d9eb7a621b0db098ea7ca7cdb3440c7ce8e2b2a9c515e7cbfad09add81594bbed4a697335fceb12d010fa718c96c8d1afa38d4228498faf1145adeff1d045568093c1d1259d1c465c677241ae232fbcea6b7efaabb01ec77400d898631c536d4be9d3a08fc513be0ea7a1097bc42afd286d990c1bf80a646989dbd40d4b576966dec97ae38b9c4d860f4c89e4af89c87cd191791e4948a275fc19591435ee86aa82aa50fe0f46e9f2eb1ce5063b331f30f00d765e3802dfef99efd4e363a91478b64ab34b7033fe97f321dd14be41fda2e387de6f0f04ebc3694c2802d6cc70ac8b845b2fe5eccea1b55d7f4498464fb885dc7a382927265eb814d8f85305c6578ae83415a2e93a8f2c084d327cae85de70a870e8387cf726cce0ad27cf6aee79c4c3afcb981582d224df88f1bcdca01f1823dca8c947a2961a2bea0c49fabe9190bda5beb3a72f88aba7648b1324b73ec689d665e6420ea4f0d68a94abf3ff911898fc1d7a1cbace2f21959cbcdd6af2bb35fc0e86658b74353ed336f573258800e3c43ef5fe34e26182a4c96e40c2763160aaef2b9aedc456903cf3f861f28baea395dd6565e227b5349b7b495c10cd8167d2f8780beab060004ec72ed2992eae9a5a7215cf66d18575e47b1475e02595466d0f436083cc0ea5a61441f6551a57819453eaae376bfba08088cb1249b516650188a97824793a1bf11ab06f172ef148cd2bd56073d0ec52a909572b07af4f730c125621a820b909fa2abc66b0f71a5f763ad067bebb69102bd6c269b650f51ee0da9d87466d897e5b92a92538295bd03147ca9931c528722dad4a96b7a1bbc420590d7e93dfaf6d3e478e5b8255f67cbb9740ffd0b66f6da1ced563c27dcc43355d7be6dc67d7ccf9ab2168baa55c2e6be8e9a935ac6ea6bb69ffd712d915431c1dbe951f7a905184850ec4c166481296380b71f75546a84e6023b54c6dfaa94f55ec3ce9f2f05d97b7cea6a7faa131f7a80c360a9251698c12e22c0af6c7baa6428c8a38f0bd59833fc27ddcbeef0029e8ab80f69318988a45ae0a6336bbc0afed9c9d14238554b4c67741bccc6f775310df836b1f861f222c4dcf90172c67a7053ea5400db0c1461cb26ba3bdea02ce8c4654c99b52961eb86cba19a47ef8be753fbc3b17f78112f2a3331641d5404ec6b75c28fbcb08b2e3d8e8edce05c6185a7ee0f7f9da017a70b300fe3299efd9d34247fdcfd7fc9fbaf6143a02fe6764f40448169d970c857139b3ed97316c0ecd62fec8f13750ceb687d187d2d928d000000d30080008b30564be78a386bb01cfb4ee1dbb21f4ec97b9c5f397f02e887c8a1a16e82bd14cfa6413466506f6b6c962a70b091485fa449529a953309d307e0d97aa4fc124a0818617a40bea9be99c40b16c9a836222e17094e41e2f99ff458389554d23458c72b7908611da519e15538eb4d96810c00e12881f3e24426fdb1cca33cb2fd4d6510ee6fe4ea186d9bcc4a586d573953c5a82928138f4570201ecda10c840f8ba60aec1c46136134ca923772836c87819de14ecf82ca6e6d8e83eebc55317cc137342f017df06d2e1edbae2c1e440005003e0007000000d0018480a20066800400ea800400c280c526f82f367dbb00ad3b30a7091de525167c1f605fdac1c602477b7040f3e58bdcd18604c6af33c1bea14abb5d96c5ac07655dd90226e268102a83c4422a03f0ed2d61e311bbd5fdef5819c862a17433418f68c9ea06898e0c95ef6a9a821503c0cfc07f731b631fb2c30b5d1fac78ade9bf571b5b038040e80bb19a78a423d71a536ffc89eb4ba72b0602bfa7c01275c8534abe7c87000095636fda6443ef6c50ec86f5170492e4fad82d36d2960cb4e586b11f88021d5f0d93637aaad8b8d3e811fc1b957a409f7b86b99fb5b7249f86142e3174436add820930af072a5829fdd3d4f78aa4074225874be85cb4ce88a74063b5b8a4d10e9d1f196cb0b10c0b5868af131fa22f4e8fdf88db5375b2266cc40b97b54ff82c64c3b794c76b90e9a5efa14418a46473c1895b9b81b327f3d4f0a51799fba1172f85782db4ed9e65bcdc27ea709b7217930363394d4b8fd3522a82e58d1b6b656930c61a981f36ed14c777450b66e864f0b5df1d8afa0f7a9d9eb4ac9225c04de62fa7d426c19c37e69057771d31a214d46963b21346dc85e1da35da09a0813bb671db9e53d6de02115c851e2d40a17a39829a651e845a3b08002e00030000000800d400", @ANYRES32, @ANYBLOB="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"], 0x9b8}, 0x1, 0x0, 0x0, 0x10}, 0x20040885) statx$auto(r3, 0x0, 0x1000, 0xbdfc, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r7, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0xffffffffffffffff, 0x4b47, 0x1) 4.146664583s ago: executing program 2 (id=871): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r1, 0x0, 0x3, 0xe9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) r2 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r2, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket(0x1, 0x3, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r3 = wait4$auto(0x0, &(0x7f0000000000)=0x7, 0x4, &(0x7f0000000040)={{0x6}, {0xdf, 0x7}, 0x1, 0x20000000000, 0x6, 0x6, 0x2, 0x6, 0x3, 0xfd00, 0x100000000, 0xc4, 0x80, 0xc4, 0x1, 0x7}) capset$auto(&(0x7f0000000100)={0xea, r3}, &(0x7f0000000140)={0x0, 0x9, 0x421}) socketpair$auto(0x180004, 0x0, 0x1, 0x0) write$auto(0x4, 0x0, 0x100082) 4.037086336s ago: executing program 0 (id=872): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x10006, 0x3, 0x5, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x80000, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000d, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r0, 0x300000000000) r2 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x400, 0x6, 0xc564, 0x3, 0xd, 0x200, r2, [0x3, 0x1, 0x6], {0x14d0, 0x2, 0x1868, 0x1, 0x6e, 0x6568, 0x6, 0x5, 0x5}, {0x9, 0x10000000, 0x8, 0x100, 0x0, 0xc52, 0x5, 0x4, 0x9}}) unshare$auto(0x40000080) getsockopt$auto_SO_RCVBUF(r0, 0x9, 0x8, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x9) mmap$auto(0xf5f, 0x2020001, 0x2, 0x4fa, 0xfffffffffffffffa, 0x7ffb) socket(0x15, 0x5, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/netstat\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/163, 0xa3) rt_sigsuspend$auto(0x0, 0x8) r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, r4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) rt_sigpending$auto(0x0, 0x7ffffffff000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) socket(0x25, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000380)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x6f) msgctl$auto_IPC_SET(0x3e54, 0x1, &(0x7f0000000300)={{0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5c, 0x0, 0x3ff}, &(0x7f0000000240)=0x3, &(0x7f00000002c0)=0x76, 0x1, 0x85d, 0x3, 0x1, 0x8, 0x5, 0x3, 0xb, @inferred=0xffffffffffffffff, @raw=0x3}) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x20003, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x165000, 0x0) 3.146612446s ago: executing program 3 (id=873): socket(0x2, 0xa, 0xa) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r0 = ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000000)=0x40) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xad\t\r\xdd\xd1M<', 0x4) mmap$auto(0x0, 0x400009, 0xffb, 0x8000000008011, 0x3, 0x0) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f0000000140)="e0373b5584e56b38a40f9fb651a190ebf0d0e5082eed3dd497f5123a3f8b3b621db5ec6662711068ca9f7e7339261c5b2e058ce6897e417c8ce141e230f5f5f8dd28b11f221dbfc4565e04f4d8e961e670ead92dd5b9b0786bd13e4aa18c35b62d83a48134583385ff0c7c84f9a45c86abaaa26d", 0xfffffff7) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC0D0c\x00', 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 1.924213209s ago: executing program 3 (id=874): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) wait4$auto(0x0, &(0x7f0000000000)=0x8, 0x0, &(0x7f0000000100)={{0x10, 0x9}, {0x6, 0x100}, 0x8000, 0x3, 0xffffffff, 0x5, 0x6, 0x47a, 0xffffffffffffff73, 0xfffffffffffffff7, 0x3, 0x3, 0x9, 0xdb, 0x69ee, 0x3}) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x141, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000440)=""/197, 0xc5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(r0, 0xfffffffffffff000, 0xfff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x5, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r0, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 1.519838387s ago: executing program 2 (id=875): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r1, 0x0, 0x3, 0xe9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) r2 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r2, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) rt_sigsuspend$auto(&(0x7f0000000140)={0x10}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r3 = wait4$auto(0x0, &(0x7f0000000000)=0x7, 0x4, &(0x7f0000000040)={{0x6}, {0xdf, 0x7}, 0x1, 0x20000000000, 0x6, 0x6, 0x2, 0x6, 0x3, 0xfd00, 0x100000000, 0xc4, 0x80, 0xc4, 0x1, 0x7}) capset$auto(&(0x7f0000000100)={0xea, r3}, &(0x7f0000000140)={0x0, 0x9, 0x421}) socketpair$auto(0x180004, 0x0, 0x1, 0x0) write$auto(0x4, 0x0, 0x100082) 1.417480015s ago: executing program 0 (id=876): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) wait4$auto(0xffffffffffffffff, &(0x7f0000000000)=0x8, 0x0, &(0x7f0000000100)={{0x10, 0x9}, {0x6, 0x100}, 0x8000, 0x3, 0xffffffff, 0x5, 0x6, 0x47a, 0xffffffffffffff71, 0xfffffffffffffff7, 0x3, 0x3, 0x9, 0xdb, 0x69ee, 0x3}) mmap$auto(0x1, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffafff) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x3, 0x0, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) write$auto(0xffffffffffffffff, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1\'\xa0\x06\x1b\xd7\xcc\xcb\xd9\a\x9f\x82\xb0\f\x8f\x7fP\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) r3 = socket(0xa, 0x1, 0x84) close_range$auto(r3, 0xfffffffffffff000, 0xfff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$auto(0x1c, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x81, 0x8, 0x3d7e, 0x0, 0x1, 0x4, r4}}, 0x92) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @multicast1}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) 1.328493507s ago: executing program 4 (id=877): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x7000000) io_uring_setup$auto(0xa, 0x0) prctl$auto(0x23, 0x6, 0x2009, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) prctl$auto(0x40, 0x7, 0x0, 0x6, 0x3080000000000000) msgctl$auto_IPC_INFO(0x10000, 0x3, &(0x7f0000000100)={{0x2, 0xee01, 0xee01, 0xffd, 0x40005, 0x3, 0x8e}, &(0x7f0000000080)=0x80, &(0x7f0000000240)=0x8, 0x6, 0x7c, 0x2000006, 0x103, 0x2, 0x406, 0x4, 0x1, @raw=0xfffffff7, @raw=0x80000002}) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, r6, 0x8) socket(0x18, 0xc, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) symlink$auto(0x0, 0x0) 350.088662ms ago: executing program 0 (id=878): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x40, 0x0) ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x28, 0x3, 0x7, 0x8, 0x1000, 0x7ffffffc, "9b42725dff0d933475a7746600", 0x6, 0x5, 0x8, 0x5, 0x2, 0x4, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) shmat$auto(0x8, &(0x7f0000000100)='.$\\&\x00', 0x6) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000", @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x2c0080c0}, 0x80) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008) 0s ago: executing program 4 (id=879): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) (async) mmap$auto(0x0, 0x80fffc, 0x0, 0x8000000008014, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) (async) r1 = getpid() (async, rerun: 64) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (rerun: 64) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) shmget$auto(0x0, 0x7b, 0x100) (async) process_vm_readv$auto(r1, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000500)="a24f5a855b070ca358449c40e02cf5ba9286f49ceea4ecc58691f72234fe292b90d8c757", 0xffffffff}, 0x1006, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) (async) r4 = syz_clone3(&(0x7f0000000480)={0x22000000, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0xa}, &(0x7f00000002c0)=""/150, 0x96, &(0x7f0000000380)=""/162, &(0x7f0000000440)=[r1], 0x1}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x4dd8, 0x5) (async, rerun: 32) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_BIND_RX(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250d00000008000300", @ANYRES64=0x0, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4c0c4) close_range$auto(r3, 0xffffffffffffffff, 0x0) r8 = prctl$auto(0x3e, 0x1ff, r4, 0xffffffffffffffff, 0x4000006) (async) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async) dup$auto(r8) (async, rerun: 32) r9 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/14/node\x00', 0x20000, 0x0) (rerun: 32) read$auto_proc_iter_file_ops_compat_inode(r9, &(0x7f00000001c0)=""/215, 0xd7) r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r10, 0x0, 0x6000000000, 0x100000004) (async, rerun: 64) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000640)={0x6, "732a0fa9ee2379d1d8e2b58937752d090a41f5a96f5475aea9ef61c12be5038e", @inferred=r2}) (rerun: 64) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f00000005c0)={"43fd8f803e76064773d9c42c0454964206d90afa55f2084509f1671dc8c2bdbb", 0x98f0, 0x400, 0xffffff98, 0x45, 0x6, r5}) (async, rerun: 32) socket(0x2, 0x800, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): 7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.425240][ T7107] R13: 00007f4ab2216038 R14: 00007f4ab2215fa0 R15: 00007fff1f11e318 [ 211.425277][ T7107] [ 213.697951][ T7153] FAULT_INJECTION: forcing a failure. [ 213.697951][ T7153] name failslab, interval 1, probability 0, space 0, times 0 [ 213.767917][ T7153] CPU: 0 UID: 0 PID: 7153 Comm: syz.0.255 Not tainted syzkaller #0 PREEMPT(full) [ 213.767964][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.767985][ T7153] Call Trace: [ 213.767996][ T7153] [ 213.768009][ T7153] dump_stack_lvl+0x100/0x190 [ 213.768054][ T7153] should_fail_ex.cold+0x5/0xa [ 213.768099][ T7153] should_failslab+0xc2/0x120 [ 213.768140][ T7153] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 213.768178][ T7153] ? apply_subsystem_event_filter+0x463/0x17b0 [ 213.768241][ T7153] kstrdup+0x51/0xe0 [ 213.768279][ T7153] apply_subsystem_event_filter+0x463/0x17b0 [ 213.768344][ T7153] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 213.768405][ T7153] ? _copy_from_user+0x59/0xd0 [ 213.768447][ T7153] subsystem_filter_write+0x95/0x120 [ 213.768501][ T7153] vfs_write+0x2aa/0x1070 [ 213.768543][ T7153] ? __pfx_subsystem_filter_write+0x10/0x10 [ 213.768604][ T7153] ? __pfx_vfs_write+0x10/0x10 [ 213.768642][ T7153] ? do_futex+0x192/0x350 [ 213.768682][ T7153] ? __pfx_do_futex+0x10/0x10 [ 213.768717][ T7153] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.768781][ T7153] ? __x64_sys_futex+0x34f/0x4d0 [ 213.768817][ T7153] ? __x64_sys_futex+0x358/0x4d0 [ 213.768861][ T7153] ksys_write+0x12a/0x250 [ 213.768902][ T7153] ? __pfx_ksys_write+0x10/0x10 [ 213.768946][ T7153] ? rcu_is_watching+0x12/0xc0 [ 213.768994][ T7153] do_syscall_64+0x10b/0xf80 [ 213.769025][ T7153] ? clear_bhb_loop+0x40/0x90 [ 213.769067][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.769102][ T7153] RIP: 0033:0x7fa35c79ce59 [ 213.769130][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.769162][ T7153] RSP: 002b:00007fa35d6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.769195][ T7153] RAX: ffffffffffffffda RBX: 00007fa35ca15fa0 RCX: 00007fa35c79ce59 [ 213.769217][ T7153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 213.769236][ T7153] RBP: 00007fa35c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 213.769256][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.769275][ T7153] R13: 00007fa35ca16038 R14: 00007fa35ca15fa0 R15: 00007ffc1d1228e8 [ 213.769320][ T7153] [ 218.420385][ T30] audit: type=1326 audit(1779517214.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.3.266" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ab1f9ce59 code=0x0 [ 219.167431][ T7222] mmap: syz.1.269 (7222) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 222.085283][ T7241] Bluetooth: hci2: command 0x0406 tx timeout [ 222.091537][ T7241] Bluetooth: hci3: command 0x0406 tx timeout [ 222.097744][ T7240] Bluetooth: hci0: command 0x0406 tx timeout [ 222.103955][ T7240] Bluetooth: hci1: command 0x0406 tx timeout [ 223.055302][ T7280] netlink: 74 bytes leftover after parsing attributes in process `syz.0.281'. [ 223.399159][ T7289] ubi0: attaching mtd0 [ 223.418688][ T7289] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 224.726700][ T7316] FAULT_INJECTION: forcing a failure. [ 224.726700][ T7316] name failslab, interval 1, probability 0, space 0, times 0 [ 224.761223][ T7316] CPU: 1 UID: 0 PID: 7316 Comm: syz.3.288 Not tainted syzkaller #0 PREEMPT(full) [ 224.761266][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.761286][ T7316] Call Trace: [ 224.761297][ T7316] [ 224.761309][ T7316] dump_stack_lvl+0x100/0x190 [ 224.761353][ T7316] should_fail_ex.cold+0x5/0xa [ 224.761398][ T7316] should_failslab+0xc2/0x120 [ 224.761439][ T7316] __kmalloc_cache_noprof+0x7a/0x6f0 [ 224.761487][ T7316] ? nl80211_dump_station+0x25e/0xa80 [ 224.761540][ T7316] nl80211_dump_station+0x25e/0xa80 [ 224.761595][ T7316] ? __pfx_nl80211_dump_station+0x10/0x10 [ 224.761692][ T7316] ? kmalloc_reserve+0xf9/0x350 [ 224.761745][ T7316] ? __asan_memset+0x23/0x50 [ 224.761798][ T7316] ? __alloc_skb+0x5b7/0x710 [ 224.761836][ T7316] ? __pfx___alloc_skb+0x10/0x10 [ 224.761881][ T7316] genl_dumpit+0x125/0x230 [ 224.761918][ T7316] netlink_dump+0x532/0xd00 [ 224.761970][ T7316] ? __pfx_netlink_dump+0x10/0x10 [ 224.762032][ T7316] ? __asan_memset+0x23/0x50 [ 224.762082][ T7316] ? genl_start+0x67a/0x970 [ 224.762129][ T7316] __netlink_dump_start+0x6d6/0x990 [ 224.762185][ T7316] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 224.762224][ T7316] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 224.762272][ T7316] ? __pfx_genl_get_cmd+0x10/0x10 [ 224.762302][ T7316] ? __pfx_genl_start+0x10/0x10 [ 224.762334][ T7316] ? __pfx_genl_dumpit+0x10/0x10 [ 224.762365][ T7316] ? __pfx_genl_done+0x10/0x10 [ 224.762403][ T7316] ? __dev_queue_xmit+0xa10/0x4950 [ 224.762436][ T7316] ? __radix_tree_lookup+0x217/0x2b0 [ 224.762493][ T7316] genl_rcv_msg+0x471/0x800 [ 224.762535][ T7316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.762571][ T7316] ? __pfx_nl80211_dump_station+0x10/0x10 [ 224.762632][ T7316] netlink_rcv_skb+0x159/0x420 [ 224.762685][ T7316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.762724][ T7316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.762796][ T7316] ? netlink_deliver_tap+0x1ae/0xcc0 [ 224.762851][ T7316] genl_rcv+0x28/0x40 [ 224.762876][ T7316] netlink_unicast+0x585/0x850 [ 224.762925][ T7316] ? __pfx_netlink_unicast+0x10/0x10 [ 224.762980][ T7316] netlink_sendmsg+0x8b0/0xda0 [ 224.763031][ T7316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.763073][ T7316] ? __import_iovec+0x1d2/0x640 [ 224.763121][ T7316] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 224.763175][ T7316] ____sys_sendmsg+0x9e1/0xb70 [ 224.763218][ T7316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.763267][ T7316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.763324][ T7316] ? __pfx_futex_wake_mark+0x10/0x10 [ 224.763371][ T7316] ___sys_sendmsg+0x190/0x1e0 [ 224.763422][ T7316] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.763541][ T7316] __sys_sendmsg+0x170/0x220 [ 224.763585][ T7316] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.763628][ T7316] ? __x64_sys_futex+0x34f/0x4d0 [ 224.763682][ T7316] ? rcu_is_watching+0x12/0xc0 [ 224.763731][ T7316] do_syscall_64+0x10b/0xf80 [ 224.763762][ T7316] ? clear_bhb_loop+0x40/0x90 [ 224.763803][ T7316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.763839][ T7316] RIP: 0033:0x7f4ab1f9ce59 [ 224.763865][ T7316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.763895][ T7316] RSP: 002b:00007f4ab2ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.763927][ T7316] RAX: ffffffffffffffda RBX: 00007f4ab2215fa0 RCX: 00007f4ab1f9ce59 [ 224.763949][ T7316] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 224.763970][ T7316] RBP: 00007f4ab2032d6f R08: 0000000000000000 R09: 0000000000000000 [ 224.763989][ T7316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.764009][ T7316] R13: 00007f4ab2216038 R14: 00007f4ab2215fa0 R15: 00007fff1f11e318 [ 224.764053][ T7316] [ 228.521296][ T7377] FAULT_INJECTION: forcing a failure. [ 228.521296][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 228.553706][ T7377] CPU: 0 UID: 0 PID: 7377 Comm: syz.1.302 Not tainted syzkaller #0 PREEMPT(full) [ 228.553749][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.553768][ T7377] Call Trace: [ 228.553779][ T7377] [ 228.553792][ T7377] dump_stack_lvl+0x100/0x190 [ 228.553836][ T7377] should_fail_ex.cold+0x5/0xa [ 228.553879][ T7377] should_failslab+0xc2/0x120 [ 228.553920][ T7377] __kmalloc_cache_noprof+0x7a/0x6f0 [ 228.553972][ T7377] ? nl80211_dump_station+0x25e/0xa80 [ 228.554026][ T7377] nl80211_dump_station+0x25e/0xa80 [ 228.554081][ T7377] ? __pfx_nl80211_dump_station+0x10/0x10 [ 228.554179][ T7377] ? kmalloc_reserve+0xf9/0x350 [ 228.554232][ T7377] ? __asan_memset+0x23/0x50 [ 228.554295][ T7377] ? __alloc_skb+0x5b7/0x710 [ 228.554334][ T7377] ? __pfx___alloc_skb+0x10/0x10 [ 228.554378][ T7377] genl_dumpit+0x125/0x230 [ 228.554416][ T7377] netlink_dump+0x532/0xd00 [ 228.554468][ T7377] ? __pfx_netlink_dump+0x10/0x10 [ 228.554531][ T7377] ? __asan_memset+0x23/0x50 [ 228.554580][ T7377] ? genl_start+0x67a/0x970 [ 228.554617][ T7377] __netlink_dump_start+0x6d6/0x990 [ 228.554672][ T7377] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 228.554713][ T7377] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 228.554761][ T7377] ? __pfx_genl_get_cmd+0x10/0x10 [ 228.554790][ T7377] ? __pfx_genl_start+0x10/0x10 [ 228.554819][ T7377] ? __pfx_genl_dumpit+0x10/0x10 [ 228.554849][ T7377] ? __pfx_genl_done+0x10/0x10 [ 228.554887][ T7377] ? __dev_queue_xmit+0xa10/0x4950 [ 228.554917][ T7377] ? __radix_tree_lookup+0x217/0x2b0 [ 228.554979][ T7377] genl_rcv_msg+0x471/0x800 [ 228.555020][ T7377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.555058][ T7377] ? __pfx_nl80211_dump_station+0x10/0x10 [ 228.555118][ T7377] netlink_rcv_skb+0x159/0x420 [ 228.555170][ T7377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.555207][ T7377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.555275][ T7377] ? netlink_deliver_tap+0x1ae/0xcc0 [ 228.555341][ T7377] genl_rcv+0x28/0x40 [ 228.555371][ T7377] netlink_unicast+0x585/0x850 [ 228.555430][ T7377] ? __pfx_netlink_unicast+0x10/0x10 [ 228.555495][ T7377] netlink_sendmsg+0x8b0/0xda0 [ 228.555554][ T7377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.555607][ T7377] ? __import_iovec+0x1d2/0x640 [ 228.555649][ T7377] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 228.555712][ T7377] ____sys_sendmsg+0x9e1/0xb70 [ 228.555763][ T7377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.555819][ T7377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.555881][ T7377] ? __pfx_futex_wake_mark+0x10/0x10 [ 228.555935][ T7377] ___sys_sendmsg+0x190/0x1e0 [ 228.555994][ T7377] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.556100][ T7377] __sys_sendmsg+0x170/0x220 [ 228.556141][ T7377] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.556180][ T7377] ? __x64_sys_futex+0x34f/0x4d0 [ 228.556230][ T7377] ? rcu_is_watching+0x12/0xc0 [ 228.556275][ T7377] do_syscall_64+0x10b/0xf80 [ 228.556315][ T7377] ? clear_bhb_loop+0x40/0x90 [ 228.556357][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.556391][ T7377] RIP: 0033:0x7f051799ce59 [ 228.556417][ T7377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.556450][ T7377] RSP: 002b:00007f051891c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.556481][ T7377] RAX: ffffffffffffffda RBX: 00007f0517c15fa0 RCX: 00007f051799ce59 [ 228.556502][ T7377] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 228.556521][ T7377] RBP: 00007f0517a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 228.556541][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.556559][ T7377] R13: 00007f0517c16038 R14: 00007f0517c15fa0 R15: 00007ffe37efdfa8 [ 228.556603][ T7377] [ 231.583696][ T30] audit: type=1326 audit(1779517227.150:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.3.313" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ab1f9ce59 code=0x0 [ 232.536144][ T30] audit: type=1326 audit(1779517228.140:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.2.314" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ff0d9ce59 code=0x0 [ 232.968606][ T7439] FAULT_INJECTION: forcing a failure. [ 232.968606][ T7439] name fail_futex, interval 1, probability 0, space 0, times 0 [ 233.043343][ T7439] CPU: 0 UID: 0 PID: 7439 Comm: syz.3.316 Not tainted syzkaller #0 PREEMPT(full) [ 233.043375][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.043390][ T7439] Call Trace: [ 233.043397][ T7439] [ 233.043406][ T7439] dump_stack_lvl+0x100/0x190 [ 233.043437][ T7439] should_fail_ex.cold+0x5/0xa [ 233.043496][ T7439] get_futex_key+0x1d2/0x1510 [ 233.043536][ T7439] ? __pfx_get_futex_key+0x10/0x10 [ 233.043584][ T7439] futex_wake+0xea/0x530 [ 233.043629][ T7439] ? rcu_is_watching+0x12/0xc0 [ 233.043659][ T7439] ? __pfx_futex_wake+0x10/0x10 [ 233.043694][ T7439] ? putname+0xb1/0x110 [ 233.043724][ T7439] ? kmem_cache_free+0x127/0x6c0 [ 233.043767][ T7439] do_futex+0x32b/0x350 [ 233.043793][ T7439] ? __pfx_do_futex+0x10/0x10 [ 233.043818][ T7439] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.043857][ T7439] ? __fget_files+0x21f/0x3d0 [ 233.043889][ T7439] __x64_sys_futex+0x34f/0x4d0 [ 233.043917][ T7439] ? __x64_sys_openat+0x12d/0x210 [ 233.043955][ T7439] ? __pfx___x64_sys_futex+0x10/0x10 [ 233.043993][ T7439] ? rcu_is_watching+0x12/0xc0 [ 233.044026][ T7439] do_syscall_64+0x10b/0xf80 [ 233.044047][ T7439] ? clear_bhb_loop+0x40/0x90 [ 233.044077][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.044102][ T7439] RIP: 0033:0x7f4ab1f9ce59 [ 233.044127][ T7439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.044150][ T7439] RSP: 002b:00007f4ab2ed10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 233.044173][ T7439] RAX: ffffffffffffffda RBX: 00007f4ab2215fa8 RCX: 00007f4ab1f9ce59 [ 233.044188][ T7439] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4ab2215fac [ 233.044203][ T7439] RBP: 00007f4ab2215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 233.044217][ T7439] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 233.044231][ T7439] R13: 00007f4ab2216038 R14: 00007fff1f11e230 R15: 00007fff1f11e318 [ 233.044261][ T7439] [ 233.945920][ T7454] netlink: 74 bytes leftover after parsing attributes in process `syz.1.319'. [ 234.908028][ T7239] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 235.035189][ T30] audit: type=1326 audit(1779517230.640:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.321" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ab1f9ce59 code=0x0 [ 236.948423][ T7497] NFSD: Failed to start, no listeners configured. [ 237.826074][ T7239] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 238.994266][ T7537] FAULT_INJECTION: forcing a failure. [ 238.994266][ T7537] name failslab, interval 1, probability 0, space 0, times 0 [ 239.008621][ T7537] CPU: 1 UID: 0 PID: 7537 Comm: syz.3.339 Not tainted syzkaller #0 PREEMPT(full) [ 239.008664][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.008684][ T7537] Call Trace: [ 239.008695][ T7537] [ 239.008708][ T7537] dump_stack_lvl+0x100/0x190 [ 239.008755][ T7537] should_fail_ex.cold+0x5/0xa [ 239.008798][ T7537] should_failslab+0xc2/0x120 [ 239.008846][ T7537] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 239.008911][ T7537] ? __d_alloc+0x34/0xa40 [ 239.008966][ T7537] __d_alloc+0x34/0xa40 [ 239.009018][ T7537] d_alloc+0x4a/0x1e0 [ 239.009068][ T7537] lookup_one_qstr_excl+0x171/0x250 [ 239.009119][ T7537] ? mnt_want_write+0x161/0x450 [ 239.009159][ T7537] filename_create+0x1cf/0x400 [ 239.009195][ T7537] ? __pfx_filename_create+0x10/0x10 [ 239.009241][ T7537] ? find_held_lock+0x2b/0x80 [ 239.009278][ T7537] filename_symlinkat+0xe1/0x560 [ 239.009316][ T7537] ? __pfx_filename_symlinkat+0x10/0x10 [ 239.009353][ T7537] ? strncpy_from_user+0x19d/0x2d0 [ 239.009384][ T7537] ? do_getname+0x191/0x390 [ 239.009422][ T7537] __x64_sys_symlink+0x79/0xb0 [ 239.009458][ T7537] do_syscall_64+0x10b/0xf80 [ 239.009479][ T7537] ? clear_bhb_loop+0x40/0x90 [ 239.009508][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.009532][ T7537] RIP: 0033:0x7f4ab1f9ce59 [ 239.009552][ T7537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.009575][ T7537] RSP: 002b:00007f4ab2ed1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 239.009598][ T7537] RAX: ffffffffffffffda RBX: 00007f4ab2215fa0 RCX: 00007f4ab1f9ce59 [ 239.009613][ T7537] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 239.009628][ T7537] RBP: 00007f4ab2032d6f R08: 0000000000000000 R09: 0000000000000000 [ 239.009642][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.009656][ T7537] R13: 00007f4ab2216038 R14: 00007f4ab2215fa0 R15: 00007fff1f11e318 [ 239.009686][ T7537] [ 239.222924][ T7541] bond0: invalid ARP target specified [ 241.210658][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 241.414749][ T7573] kvm: user requested TSC rate below hardware speed [ 244.567015][ T7623] FAULT_INJECTION: forcing a failure. [ 244.567015][ T7623] name failslab, interval 1, probability 0, space 0, times 0 [ 244.592301][ T7623] CPU: 0 UID: 0 PID: 7623 Comm: syz.2.358 Not tainted syzkaller #0 PREEMPT(full) [ 244.592343][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.592363][ T7623] Call Trace: [ 244.592373][ T7623] [ 244.592387][ T7623] dump_stack_lvl+0x100/0x190 [ 244.592430][ T7623] should_fail_ex.cold+0x5/0xa [ 244.592474][ T7623] should_failslab+0xc2/0x120 [ 244.592515][ T7623] __kmalloc_cache_noprof+0x7a/0x6f0 [ 244.592565][ T7623] ? nl80211_dump_station+0x25e/0xa80 [ 244.592619][ T7623] nl80211_dump_station+0x25e/0xa80 [ 244.592675][ T7623] ? __pfx_nl80211_dump_station+0x10/0x10 [ 244.592773][ T7623] ? kmalloc_reserve+0xf9/0x350 [ 244.592826][ T7623] ? __asan_memset+0x23/0x50 [ 244.592895][ T7623] ? __alloc_skb+0x5b7/0x710 [ 244.592936][ T7623] ? __pfx___alloc_skb+0x10/0x10 [ 244.592981][ T7623] genl_dumpit+0x125/0x230 [ 244.593018][ T7623] netlink_dump+0x532/0xd00 [ 244.593072][ T7623] ? __pfx_netlink_dump+0x10/0x10 [ 244.593135][ T7623] ? __asan_memset+0x23/0x50 [ 244.593187][ T7623] ? genl_start+0x67a/0x970 [ 244.593224][ T7623] __netlink_dump_start+0x6d6/0x990 [ 244.593281][ T7623] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 244.593322][ T7623] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 244.593371][ T7623] ? __pfx_genl_get_cmd+0x10/0x10 [ 244.593400][ T7623] ? __pfx_genl_start+0x10/0x10 [ 244.593430][ T7623] ? __pfx_genl_dumpit+0x10/0x10 [ 244.593462][ T7623] ? __pfx_genl_done+0x10/0x10 [ 244.593499][ T7623] ? __dev_queue_xmit+0xa10/0x4950 [ 244.593530][ T7623] ? __radix_tree_lookup+0x217/0x2b0 [ 244.593587][ T7623] genl_rcv_msg+0x471/0x800 [ 244.593627][ T7623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.593663][ T7623] ? __pfx_nl80211_dump_station+0x10/0x10 [ 244.593723][ T7623] netlink_rcv_skb+0x159/0x420 [ 244.593777][ T7623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.593814][ T7623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.593900][ T7623] ? netlink_deliver_tap+0x1ae/0xcc0 [ 244.593959][ T7623] genl_rcv+0x28/0x40 [ 244.593990][ T7623] netlink_unicast+0x585/0x850 [ 244.594050][ T7623] ? __pfx_netlink_unicast+0x10/0x10 [ 244.594115][ T7623] netlink_sendmsg+0x8b0/0xda0 [ 244.594176][ T7623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.594226][ T7623] ? __import_iovec+0x1d2/0x640 [ 244.594270][ T7623] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 244.594333][ T7623] ____sys_sendmsg+0x9e1/0xb70 [ 244.594384][ T7623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.594442][ T7623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.594505][ T7623] ? __pfx_futex_wake_mark+0x10/0x10 [ 244.594559][ T7623] ___sys_sendmsg+0x190/0x1e0 [ 244.594616][ T7623] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.594724][ T7623] __sys_sendmsg+0x170/0x220 [ 244.594770][ T7623] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.594812][ T7623] ? __x64_sys_futex+0x34f/0x4d0 [ 244.594874][ T7623] ? rcu_is_watching+0x12/0xc0 [ 244.594923][ T7623] do_syscall_64+0x10b/0xf80 [ 244.594953][ T7623] ? clear_bhb_loop+0x40/0x90 [ 244.594994][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.595028][ T7623] RIP: 0033:0x7f3ff0d9ce59 [ 244.595053][ T7623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.595081][ T7623] RSP: 002b:00007f3ff1c84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.595110][ T7623] RAX: ffffffffffffffda RBX: 00007f3ff1015fa0 RCX: 00007f3ff0d9ce59 [ 244.595131][ T7623] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 244.595152][ T7623] RBP: 00007f3ff0e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 244.595172][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.595191][ T7623] R13: 00007f3ff1016038 R14: 00007f3ff1015fa0 R15: 00007ffdf68afa48 [ 244.595234][ T7623] [ 247.612906][ T7682] FAULT_INJECTION: forcing a failure. [ 247.612906][ T7682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.626699][ T7682] CPU: 1 UID: 0 PID: 7682 Comm: syz.1.370 Not tainted syzkaller #0 PREEMPT(full) [ 247.626736][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.626750][ T7682] Call Trace: [ 247.626757][ T7682] [ 247.626765][ T7682] dump_stack_lvl+0x100/0x190 [ 247.626797][ T7682] should_fail_ex.cold+0x5/0xa [ 247.626826][ T7682] _copy_to_user+0x32/0xd0 [ 247.626853][ T7682] simple_read_from_buffer+0xcb/0x170 [ 247.626882][ T7682] proc_fail_nth_read+0x1af/0x230 [ 247.626923][ T7682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.626961][ T7682] ? rw_verify_area+0xce/0x6d0 [ 247.626984][ T7682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.627021][ T7682] vfs_read+0x1e4/0xb30 [ 247.627050][ T7682] ? __pfx_vfs_read+0x10/0x10 [ 247.627075][ T7682] ? __fget_files+0x215/0x3d0 [ 247.627108][ T7682] ? __fget_files+0x21f/0x3d0 [ 247.627142][ T7682] ksys_read+0x12a/0x250 [ 247.627168][ T7682] ? __pfx_ksys_read+0x10/0x10 [ 247.627196][ T7682] ? rcu_is_watching+0x12/0xc0 [ 247.627227][ T7682] do_syscall_64+0x10b/0xf80 [ 247.627247][ T7682] ? clear_bhb_loop+0x40/0x90 [ 247.627281][ T7682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.627305][ T7682] RIP: 0033:0x7f051795d68e [ 247.627323][ T7682] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.627344][ T7682] RSP: 002b:00007f05188fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.627365][ T7682] RAX: ffffffffffffffda RBX: 00007f05188fb6c0 RCX: 00007f051795d68e [ 247.627380][ T7682] RDX: 000000000000000f RSI: 00007f05188fb0a0 RDI: 000000000000000a [ 247.627416][ T7682] RBP: 00007f05188fb090 R08: 0000000000000000 R09: 0000000000000000 [ 247.627435][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.627453][ T7682] R13: 00007f0517c16128 R14: 00007f0517c16090 R15: 00007ffe37efdfa8 [ 247.627494][ T7682] [ 250.275721][ T7713] netlink: 74 bytes leftover after parsing attributes in process `syz.0.375'. [ 252.782913][ T7744] FAULT_INJECTION: forcing a failure. [ 252.782913][ T7744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.821863][ T7744] CPU: 0 UID: 0 PID: 7744 Comm: syz.2.382 Not tainted syzkaller #0 PREEMPT(full) [ 252.821906][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.821925][ T7744] Call Trace: [ 252.821935][ T7744] [ 252.821947][ T7744] dump_stack_lvl+0x100/0x190 [ 252.821988][ T7744] should_fail_ex.cold+0x5/0xa [ 252.822030][ T7744] strncpy_from_user+0x3b/0x2d0 [ 252.822071][ T7744] do_getname+0x78/0x390 [ 252.822123][ T7744] __x64_sys_symlink+0x57/0xb0 [ 252.822165][ T7744] do_syscall_64+0x10b/0xf80 [ 252.822191][ T7744] ? clear_bhb_loop+0x40/0x90 [ 252.822228][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.822257][ T7744] RIP: 0033:0x7f3ff0d9ce59 [ 252.822280][ T7744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.822307][ T7744] RSP: 002b:00007f3ff1c84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 252.822333][ T7744] RAX: ffffffffffffffda RBX: 00007f3ff1015fa0 RCX: 00007f3ff0d9ce59 [ 252.822352][ T7744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.822369][ T7744] RBP: 00007f3ff0e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 252.822386][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.822402][ T7744] R13: 00007f3ff1016038 R14: 00007f3ff1015fa0 R15: 00007ffdf68afa48 [ 252.822437][ T7744] [ 253.293081][ T30] audit: type=1326 audit(1779517248.890:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.1.380" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f051799ce59 code=0x0 [ 253.500922][ T30] audit: type=1326 audit(1779517249.100:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.3.381" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ab1f9ce59 code=0x0 [ 254.294844][ T7767] FAULT_INJECTION: forcing a failure. [ 254.294844][ T7767] name failslab, interval 1, probability 0, space 0, times 0 [ 254.328719][ T7767] CPU: 1 UID: 0 PID: 7767 Comm: syz.3.387 Not tainted syzkaller #0 PREEMPT(full) [ 254.328762][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.328781][ T7767] Call Trace: [ 254.328792][ T7767] [ 254.328805][ T7767] dump_stack_lvl+0x100/0x190 [ 254.328848][ T7767] should_fail_ex.cold+0x5/0xa [ 254.328890][ T7767] ? __register_sysctl_table+0xac/0x1650 [ 254.328935][ T7767] should_failslab+0xc2/0x120 [ 254.328976][ T7767] __kmalloc_noprof+0xe0/0x850 [ 254.329016][ T7767] __register_sysctl_table+0xac/0x1650 [ 254.329061][ T7767] ? rcu_is_watching+0x12/0xc0 [ 254.329103][ T7767] ? trace_kmalloc+0xe3/0x110 [ 254.329148][ T7767] ? __pfx___register_sysctl_table+0x10/0x10 [ 254.329195][ T7767] ? mq_init_ns+0x460/0x820 [ 254.329231][ T7767] ? __asan_memcpy+0x3c/0x60 [ 254.329288][ T7767] setup_ipc_sysctls+0x1aa/0x300 [ 254.329343][ T7767] copy_ipcs+0x57a/0x7e0 [ 254.329381][ T7767] create_new_namespaces+0x20a/0xac0 [ 254.329427][ T7767] ? security_capable+0x80/0x260 [ 254.329489][ T7767] copy_namespaces+0x468/0x5e0 [ 254.329537][ T7767] copy_process+0x3531/0x7ed0 [ 254.329593][ T7767] ? futex_unqueue+0x133/0x2c0 [ 254.329651][ T7767] ? __pfx_copy_process+0x10/0x10 [ 254.329710][ T7767] ? _copy_from_user+0x59/0xd0 [ 254.329752][ T7767] kernel_clone+0x12e/0x9c0 [ 254.329802][ T7767] ? __pfx_kernel_clone+0x10/0x10 [ 254.329859][ T7767] ? __pfx_futex_wait+0x10/0x10 [ 254.329915][ T7767] __do_sys_clone3+0x214/0x290 [ 254.329964][ T7767] ? __pfx___do_sys_clone3+0x10/0x10 [ 254.330057][ T7767] ? rcu_is_watching+0x12/0xc0 [ 254.330105][ T7767] do_syscall_64+0x10b/0xf80 [ 254.330136][ T7767] ? clear_bhb_loop+0x40/0x90 [ 254.330177][ T7767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.330212][ T7767] RIP: 0033:0x7f4ab1f9ce59 [ 254.330239][ T7767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.330270][ T7767] RSP: 002b:00007f4ab2eafef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 254.330305][ T7767] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4ab1f9ce59 [ 254.330321][ T7767] RDX: 00007f4ab2eaff10 RSI: 0000000000000058 RDI: 00007f4ab2eaff10 [ 254.330335][ T7767] RBP: 00007f4ab2032d6f R08: 0000000000000000 R09: 0000000000000058 [ 254.330350][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.330364][ T7767] R13: 00007f4ab2216128 R14: 00007f4ab2216090 R15: 00007fff1f11e318 [ 254.330394][ T7767] [ 255.827043][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.834391][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.387821][ T7820] FAULT_INJECTION: forcing a failure. [ 257.387821][ T7820] name fail_futex, interval 1, probability 0, space 0, times 0 [ 257.454953][ T7820] CPU: 1 UID: 0 PID: 7820 Comm: syz.3.399 Not tainted syzkaller #0 PREEMPT(full) [ 257.454996][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.455016][ T7820] Call Trace: [ 257.455026][ T7820] [ 257.455038][ T7820] dump_stack_lvl+0x100/0x190 [ 257.455080][ T7820] should_fail_ex.cold+0x5/0xa [ 257.455124][ T7820] get_futex_key+0x1d2/0x1510 [ 257.455164][ T7820] ? __pfx_get_futex_key+0x10/0x10 [ 257.455195][ T7820] ? pick_eevdf+0x4d3/0x860 [ 257.455247][ T7820] ? update_se+0x94/0x770 [ 257.455310][ T7820] futex_wait_setup+0x83/0x510 [ 257.455367][ T7820] __futex_wait+0x19f/0x300 [ 257.455415][ T7820] ? __pfx___futex_wait+0x10/0x10 [ 257.455472][ T7820] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 257.455529][ T7820] ? __pfx_futex_wake_mark+0x10/0x10 [ 257.455581][ T7820] ? find_held_lock+0x2b/0x80 [ 257.455623][ T7820] ? futex_wake+0x456/0x530 [ 257.455674][ T7820] futex_wait+0xe6/0x370 [ 257.455717][ T7820] ? __pfx_futex_wait+0x10/0x10 [ 257.455781][ T7820] do_futex+0x1ef/0x350 [ 257.455817][ T7820] ? __pfx_do_futex+0x10/0x10 [ 257.455896][ T7820] __x64_sys_futex+0x34f/0x4d0 [ 257.455941][ T7820] ? __pfx___x64_sys_futex+0x10/0x10 [ 257.455981][ T7820] ? __pfx___do_sys_prctl+0x10/0x10 [ 257.456021][ T7820] ? rcu_is_watching+0x12/0xc0 [ 257.456069][ T7820] do_syscall_64+0x10b/0xf80 [ 257.456110][ T7820] ? clear_bhb_loop+0x40/0x90 [ 257.456168][ T7820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.456202][ T7820] RIP: 0033:0x7f4ab1f9ce59 [ 257.456229][ T7820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.456260][ T7820] RSP: 002b:00007f4ab2ed10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 257.456292][ T7820] RAX: ffffffffffffffda RBX: 00007f4ab2215fa8 RCX: 00007f4ab1f9ce59 [ 257.456314][ T7820] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4ab2215fa8 [ 257.456333][ T7820] RBP: 00007f4ab2215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 257.456353][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.456372][ T7820] R13: 00007f4ab2216038 R14: 00007fff1f11e230 R15: 00007fff1f11e318 [ 257.456415][ T7820] [ 257.879616][ T7823] FAULT_INJECTION: forcing a failure. [ 257.879616][ T7823] name failslab, interval 1, probability 0, space 0, times 0 [ 257.960310][ T7823] CPU: 0 UID: 0 PID: 7823 Comm: syz.0.400 Not tainted syzkaller #0 PREEMPT(full) [ 257.960366][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.960386][ T7823] Call Trace: [ 257.960397][ T7823] [ 257.960410][ T7823] dump_stack_lvl+0x100/0x190 [ 257.960456][ T7823] should_fail_ex.cold+0x5/0xa [ 257.960500][ T7823] should_failslab+0xc2/0x120 [ 257.960540][ T7823] __kmalloc_cache_noprof+0x7a/0x6f0 [ 257.960589][ T7823] ? nl80211_dump_station+0x25e/0xa80 [ 257.960644][ T7823] nl80211_dump_station+0x25e/0xa80 [ 257.960700][ T7823] ? __pfx_nl80211_dump_station+0x10/0x10 [ 257.960822][ T7823] ? kmalloc_reserve+0xf9/0x350 [ 257.960877][ T7823] ? __asan_memset+0x23/0x50 [ 257.960934][ T7823] ? __alloc_skb+0x5b7/0x710 [ 257.960971][ T7823] ? __pfx___alloc_skb+0x10/0x10 [ 257.961016][ T7823] genl_dumpit+0x125/0x230 [ 257.961053][ T7823] netlink_dump+0x532/0xd00 [ 257.961106][ T7823] ? __pfx_netlink_dump+0x10/0x10 [ 257.961170][ T7823] ? __asan_memset+0x23/0x50 [ 257.961222][ T7823] ? genl_start+0x67a/0x970 [ 257.961261][ T7823] __netlink_dump_start+0x6d6/0x990 [ 257.961318][ T7823] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 257.961364][ T7823] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 257.961412][ T7823] ? __pfx_genl_get_cmd+0x10/0x10 [ 257.961441][ T7823] ? __pfx_genl_start+0x10/0x10 [ 257.961473][ T7823] ? __pfx_genl_dumpit+0x10/0x10 [ 257.961504][ T7823] ? __pfx_genl_done+0x10/0x10 [ 257.961542][ T7823] ? __dev_queue_xmit+0xa10/0x4950 [ 257.961573][ T7823] ? __radix_tree_lookup+0x217/0x2b0 [ 257.961629][ T7823] genl_rcv_msg+0x471/0x800 [ 257.961669][ T7823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.961705][ T7823] ? __pfx_nl80211_dump_station+0x10/0x10 [ 257.961766][ T7823] netlink_rcv_skb+0x159/0x420 [ 257.961818][ T7823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.961855][ T7823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.961927][ T7823] ? netlink_deliver_tap+0x1ae/0xcc0 [ 257.961984][ T7823] genl_rcv+0x28/0x40 [ 257.962013][ T7823] netlink_unicast+0x585/0x850 [ 257.962072][ T7823] ? __pfx_netlink_unicast+0x10/0x10 [ 257.962138][ T7823] netlink_sendmsg+0x8b0/0xda0 [ 257.962198][ T7823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.962249][ T7823] ? __import_iovec+0x1d2/0x640 [ 257.962292][ T7823] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 257.962363][ T7823] ____sys_sendmsg+0x9e1/0xb70 [ 257.962413][ T7823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.962470][ T7823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.962531][ T7823] ? __pfx_futex_wake_mark+0x10/0x10 [ 257.962584][ T7823] ___sys_sendmsg+0x190/0x1e0 [ 257.962642][ T7823] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.962750][ T7823] __sys_sendmsg+0x170/0x220 [ 257.962793][ T7823] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.962835][ T7823] ? __x64_sys_futex+0x34f/0x4d0 [ 257.962891][ T7823] ? rcu_is_watching+0x12/0xc0 [ 257.962938][ T7823] do_syscall_64+0x10b/0xf80 [ 257.962967][ T7823] ? clear_bhb_loop+0x40/0x90 [ 257.963009][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.963044][ T7823] RIP: 0033:0x7fa35c79ce59 [ 257.963071][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.963104][ T7823] RSP: 002b:00007fa35d6a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.963136][ T7823] RAX: ffffffffffffffda RBX: 00007fa35ca15fa0 RCX: 00007fa35c79ce59 [ 257.963157][ T7823] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 257.963178][ T7823] RBP: 00007fa35c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 257.963197][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.963217][ T7823] R13: 00007fa35ca16038 R14: 00007fa35ca15fa0 R15: 00007ffc1d1228e8 [ 257.963261][ T7823] [ 258.523947][ T7831] netlink: 74 bytes leftover after parsing attributes in process `syz.1.402'. [ 259.367491][ T7835] FAULT_INJECTION: forcing a failure. [ 259.367491][ T7835] name failslab, interval 1, probability 0, space 0, times 0 [ 259.476792][ T7835] CPU: 1 UID: 0 PID: 7835 Comm: syz.1.403 Not tainted syzkaller #0 PREEMPT(full) [ 259.476835][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.476854][ T7835] Call Trace: [ 259.476864][ T7835] [ 259.476876][ T7835] dump_stack_lvl+0x100/0x190 [ 259.476919][ T7835] should_fail_ex.cold+0x5/0xa [ 259.476963][ T7835] should_failslab+0xc2/0x120 [ 259.477004][ T7835] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 259.477057][ T7835] ? __proc_create+0x2cb/0x8c0 [ 259.477109][ T7835] __proc_create+0x2cb/0x8c0 [ 259.477154][ T7835] ? __pfx___proc_create+0x10/0x10 [ 259.477204][ T7835] ? _raw_write_unlock+0x28/0x50 [ 259.477265][ T7835] ? proc_register+0x559/0x8a0 [ 259.477316][ T7835] proc_create_reg+0x75/0x170 [ 259.477366][ T7835] proc_create_data+0x86/0x110 [ 259.477412][ T7835] ? __pfx_proc_create_data+0x10/0x10 [ 259.477459][ T7835] ? cache_register_net+0x137/0x5e0 [ 259.477498][ T7835] ? cache_register_net+0x137/0x5e0 [ 259.477544][ T7835] cache_register_net+0x2d6/0x5e0 [ 259.477585][ T7835] nfsd_export_init+0xb6/0x250 [ 259.477644][ T7835] ? __pfx_nfsd_net_init+0x10/0x10 [ 259.477696][ T7835] nfsd_net_init+0x69/0x3e0 [ 259.477751][ T7835] ? __pfx_nfsd_net_init+0x10/0x10 [ 259.477803][ T7835] ops_init+0x1e2/0x5f0 [ 259.477851][ T7835] setup_net+0x118/0x3a0 [ 259.477896][ T7835] ? __pfx_setup_net+0x10/0x10 [ 259.477939][ T7835] ? mutex_init_lockdep+0xf1/0x120 [ 259.477982][ T7835] copy_net_ns+0x46f/0x7c0 [ 259.478034][ T7835] create_new_namespaces+0x3ea/0xac0 [ 259.478089][ T7835] unshare_nsproxy_namespaces+0xf2/0x220 [ 259.478140][ T7835] ksys_unshare+0x438/0xab0 [ 259.478194][ T7835] ? __pfx_ksys_unshare+0x10/0x10 [ 259.478252][ T7835] ? xfd_validate_state+0x129/0x190 [ 259.478287][ T7835] ? ksys_write+0x1ac/0x250 [ 259.478340][ T7835] __x64_sys_unshare+0x31/0x40 [ 259.478391][ T7835] do_syscall_64+0x10b/0xf80 [ 259.478421][ T7835] ? clear_bhb_loop+0x40/0x90 [ 259.478463][ T7835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.478497][ T7835] RIP: 0033:0x7f051799ce59 [ 259.478525][ T7835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.478558][ T7835] RSP: 002b:00007f051891c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 259.478590][ T7835] RAX: ffffffffffffffda RBX: 00007f0517c15fa0 RCX: 00007f051799ce59 [ 259.478613][ T7835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 259.478633][ T7835] RBP: 00007f0517a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 259.478653][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.478672][ T7835] R13: 00007f0517c16038 R14: 00007f0517c15fa0 R15: 00007ffe37efdfa8 [ 259.478716][ T7835] [ 262.222348][ T7873] netlink: 74 bytes leftover after parsing attributes in process `syz.1.411'. [ 262.636748][ T7881] netlink: 'syz.0.413': attribute type 11 has an invalid length. [ 263.008304][ T7897] FAULT_INJECTION: forcing a failure. [ 263.008304][ T7897] name fail_futex, interval 1, probability 0, space 0, times 0 [ 263.052027][ T7897] CPU: 1 UID: 0 PID: 7897 Comm: syz.3.418 Not tainted syzkaller #0 PREEMPT(full) [ 263.052068][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.052086][ T7897] Call Trace: [ 263.052096][ T7897] [ 263.052107][ T7897] dump_stack_lvl+0x100/0x190 [ 263.052146][ T7897] should_fail_ex.cold+0x5/0xa [ 263.052184][ T7897] get_futex_key+0x1d2/0x1510 [ 263.052218][ T7897] ? __pfx_get_futex_key+0x10/0x10 [ 263.052245][ T7897] ? pick_eevdf+0x4d3/0x860 [ 263.052289][ T7897] ? update_se+0x94/0x770 [ 263.052342][ T7897] futex_wait_setup+0x83/0x510 [ 263.052393][ T7897] __futex_wait+0x19f/0x300 [ 263.052435][ T7897] ? __pfx___futex_wait+0x10/0x10 [ 263.052472][ T7897] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 263.052522][ T7897] ? __pfx_futex_wake_mark+0x10/0x10 [ 263.052566][ T7897] ? find_held_lock+0x2b/0x80 [ 263.052613][ T7897] ? futex_wake+0x456/0x530 [ 263.052659][ T7897] futex_wait+0xe6/0x370 [ 263.052705][ T7897] ? __pfx_futex_wait+0x10/0x10 [ 263.052769][ T7897] do_futex+0x1ef/0x350 [ 263.052801][ T7897] ? __pfx_do_futex+0x10/0x10 [ 263.052834][ T7897] ? fput+0x79/0x100 [ 263.052888][ T7897] ? __sys_sendmsg+0x18f/0x220 [ 263.052935][ T7897] __x64_sys_futex+0x34f/0x4d0 [ 263.052976][ T7897] ? __pfx___x64_sys_futex+0x10/0x10 [ 263.053026][ T7897] ? rcu_is_watching+0x12/0xc0 [ 263.053076][ T7897] do_syscall_64+0x10b/0xf80 [ 263.053109][ T7897] ? clear_bhb_loop+0x40/0x90 [ 263.053152][ T7897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.053188][ T7897] RIP: 0033:0x7f4ab1f9ce59 [ 263.053216][ T7897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.053248][ T7897] RSP: 002b:00007f4ab2ed10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 263.053280][ T7897] RAX: ffffffffffffffda RBX: 00007f4ab2215fa8 RCX: 00007f4ab1f9ce59 [ 263.053308][ T7897] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4ab2215fa8 [ 263.053323][ T7897] RBP: 00007f4ab2215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 263.053337][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.053357][ T7897] R13: 00007f4ab2216038 R14: 00007fff1f11e230 R15: 00007fff1f11e318 [ 263.053389][ T7897] [ 263.418754][ T30] audit: type=1326 audit(1779517259.020:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.415" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f051799ce59 code=0x0 [ 265.398149][ T7930] random: crng reseeded on system resumption [ 266.707974][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 267.117790][ T7957] bond0: invalid ARP target specified [ 267.285532][ T7961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.425'. [ 267.319389][ T7957] nbd: socks must be embedded in a SOCK_ITEM attr [ 267.390252][ T7957] block nbd0: shutting down sockets [ 268.951801][ T8004] program syz.3.434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.631320][ T8019] FAULT_INJECTION: forcing a failure. [ 269.631320][ T8019] name failslab, interval 1, probability 0, space 0, times 0 [ 269.676411][ T8019] CPU: 1 UID: 0 PID: 8019 Comm: syz.2.438 Not tainted syzkaller #0 PREEMPT(full) [ 269.676453][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.676472][ T8019] Call Trace: [ 269.676481][ T8019] [ 269.676493][ T8019] dump_stack_lvl+0x100/0x190 [ 269.676536][ T8019] should_fail_ex.cold+0x5/0xa [ 269.676576][ T8019] ? tomoyo_encode2+0xfb/0x3c0 [ 269.676617][ T8019] should_failslab+0xc2/0x120 [ 269.676656][ T8019] __kmalloc_noprof+0xe0/0x850 [ 269.676684][ T8019] ? d_absolute_path+0x136/0x1b0 [ 269.676723][ T8019] tomoyo_encode2+0xfb/0x3c0 [ 269.676772][ T8019] tomoyo_encode+0x29/0x50 [ 269.676821][ T8019] tomoyo_realpath_from_path+0x18c/0x690 [ 269.676875][ T8019] tomoyo_path_number_perm+0x23c/0x580 [ 269.676912][ T8019] ? tomoyo_path_number_perm+0x22e/0x580 [ 269.676952][ T8019] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 269.677030][ T8019] ? find_held_lock+0x2b/0x80 [ 269.677072][ T8019] ? __fget_files+0x215/0x3d0 [ 269.677109][ T8019] ? hook_file_ioctl_common+0x149/0x410 [ 269.677145][ T8019] ? __fget_files+0x215/0x3d0 [ 269.677191][ T8019] ? __fget_files+0x21f/0x3d0 [ 269.677237][ T8019] security_file_ioctl+0xd3/0x230 [ 269.677276][ T8019] __x64_sys_ioctl+0xb7/0x210 [ 269.677313][ T8019] do_syscall_64+0x10b/0xf80 [ 269.677342][ T8019] ? clear_bhb_loop+0x40/0x90 [ 269.677383][ T8019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.677417][ T8019] RIP: 0033:0x7f3ff0d9ce59 [ 269.677443][ T8019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.677473][ T8019] RSP: 002b:00007f3ff1c84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.677502][ T8019] RAX: ffffffffffffffda RBX: 00007f3ff1015fa0 RCX: 00007f3ff0d9ce59 [ 269.677523][ T8019] RDX: 0000000000000001 RSI: 0000000000004b47 RDI: 0000000000000003 [ 269.677541][ T8019] RBP: 00007f3ff1c84090 R08: 0000000000000000 R09: 0000000000000000 [ 269.677560][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.677579][ T8019] R13: 00007f3ff1016038 R14: 00007f3ff1015fa0 R15: 00007ffdf68afa48 [ 269.677621][ T8019] [ 269.677647][ T8019] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.506520][ T8032] forcing mempool usage for bio_alloc_bioset+0x8e7/0x1070 [ 272.130861][ T8057] FAULT_INJECTION: forcing a failure. [ 272.130861][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 272.183136][ T8057] CPU: 1 UID: 0 PID: 8057 Comm: syz.1.447 Not tainted syzkaller #0 PREEMPT(full) [ 272.183183][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.183203][ T8057] Call Trace: [ 272.183213][ T8057] [ 272.183226][ T8057] dump_stack_lvl+0x100/0x190 [ 272.183269][ T8057] should_fail_ex.cold+0x5/0xa [ 272.183312][ T8057] should_failslab+0xc2/0x120 [ 272.183353][ T8057] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 272.183408][ T8057] ? skb_clone+0x190/0x400 [ 272.183460][ T8057] skb_clone+0x190/0x400 [ 272.183501][ T8057] netlink_deliver_tap+0xaed/0xcc0 [ 272.183561][ T8057] netlink_dump+0x631/0xd00 [ 272.183614][ T8057] ? __pfx_netlink_dump+0x10/0x10 [ 272.183684][ T8057] ? __asan_memset+0x23/0x50 [ 272.183737][ T8057] ? genl_start+0x67a/0x970 [ 272.183776][ T8057] __netlink_dump_start+0x6d6/0x990 [ 272.183835][ T8057] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 272.183876][ T8057] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 272.183924][ T8057] ? __pfx_genl_get_cmd+0x10/0x10 [ 272.183954][ T8057] ? __pfx_genl_start+0x10/0x10 [ 272.183984][ T8057] ? __pfx_genl_dumpit+0x10/0x10 [ 272.184015][ T8057] ? __pfx_genl_done+0x10/0x10 [ 272.184053][ T8057] ? __dev_queue_xmit+0xa10/0x4950 [ 272.184085][ T8057] ? __radix_tree_lookup+0x217/0x2b0 [ 272.184141][ T8057] genl_rcv_msg+0x471/0x800 [ 272.184182][ T8057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.184219][ T8057] ? __pfx_nl80211_dump_station+0x10/0x10 [ 272.184281][ T8057] netlink_rcv_skb+0x159/0x420 [ 272.184333][ T8057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.184371][ T8057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.184441][ T8057] ? netlink_deliver_tap+0x1ae/0xcc0 [ 272.184498][ T8057] genl_rcv+0x28/0x40 [ 272.184533][ T8057] netlink_unicast+0x585/0x850 [ 272.184590][ T8057] ? __pfx_netlink_unicast+0x10/0x10 [ 272.184661][ T8057] netlink_sendmsg+0x8b0/0xda0 [ 272.184722][ T8057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.184773][ T8057] ? __import_iovec+0x1d2/0x640 [ 272.184817][ T8057] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 272.184878][ T8057] ____sys_sendmsg+0x9e1/0xb70 [ 272.184927][ T8057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.184984][ T8057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.185033][ T8057] ? preempt_schedule_thunk+0x16/0x30 [ 272.185095][ T8057] ? try_to_wake_up+0x5f6/0x1900 [ 272.185148][ T8057] ___sys_sendmsg+0x190/0x1e0 [ 272.185205][ T8057] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.185260][ T8057] ? futex_private_hash_put+0x107/0x1c0 [ 272.185342][ T8057] __sys_sendmsg+0x170/0x220 [ 272.185384][ T8057] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.185426][ T8057] ? __x64_sys_futex+0x34f/0x4d0 [ 272.185480][ T8057] ? rcu_is_watching+0x12/0xc0 [ 272.185525][ T8057] do_syscall_64+0x10b/0xf80 [ 272.185555][ T8057] ? clear_bhb_loop+0x40/0x90 [ 272.185596][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.185630][ T8057] RIP: 0033:0x7f051799ce59 [ 272.185665][ T8057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.185697][ T8057] RSP: 002b:00007f051891c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.185735][ T8057] RAX: ffffffffffffffda RBX: 00007f0517c15fa0 RCX: 00007f051799ce59 [ 272.185757][ T8057] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 272.185777][ T8057] RBP: 00007f0517a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 272.185797][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.185816][ T8057] R13: 00007f0517c16038 R14: 00007f0517c15fa0 R15: 00007ffe37efdfa8 [ 272.185860][ T8057] [ 272.748182][ T8062] FAULT_INJECTION: forcing a failure. [ 272.748182][ T8062] name fail_futex, interval 1, probability 0, space 0, times 0 [ 272.761040][ T8062] CPU: 1 UID: 0 PID: 8062 Comm: syz.0.448 Not tainted syzkaller #0 PREEMPT(full) [ 272.761071][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.761086][ T8062] Call Trace: [ 272.761094][ T8062] [ 272.761104][ T8062] dump_stack_lvl+0x100/0x190 [ 272.761134][ T8062] should_fail_ex.cold+0x5/0xa [ 272.761165][ T8062] get_futex_key+0x1d2/0x1510 [ 272.761193][ T8062] ? __pfx_get_futex_key+0x10/0x10 [ 272.761215][ T8062] ? pick_eevdf+0x4d3/0x860 [ 272.761252][ T8062] ? update_se+0x94/0x770 [ 272.761297][ T8062] futex_wait_setup+0x83/0x510 [ 272.761337][ T8062] __futex_wait+0x19f/0x300 [ 272.761372][ T8062] ? __pfx___futex_wait+0x10/0x10 [ 272.761403][ T8062] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 272.761445][ T8062] ? __pfx_futex_wake_mark+0x10/0x10 [ 272.761482][ T8062] ? find_held_lock+0x2b/0x80 [ 272.761513][ T8062] ? futex_wake+0x456/0x530 [ 272.761552][ T8062] futex_wait+0xe6/0x370 [ 272.761584][ T8062] ? __pfx_futex_wait+0x10/0x10 [ 272.761632][ T8062] do_futex+0x1ef/0x350 [ 272.761659][ T8062] ? __pfx_do_futex+0x10/0x10 [ 272.761693][ T8062] __x64_sys_futex+0x34f/0x4d0 [ 272.761724][ T8062] ? __pfx___x64_sys_futex+0x10/0x10 [ 272.761759][ T8062] ? rcu_is_watching+0x12/0xc0 [ 272.761792][ T8062] do_syscall_64+0x10b/0xf80 [ 272.761813][ T8062] ? clear_bhb_loop+0x40/0x90 [ 272.761842][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.761866][ T8062] RIP: 0033:0x7fa35c79ce59 [ 272.761886][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.761908][ T8062] RSP: 002b:00007fa35d6a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 272.761931][ T8062] RAX: ffffffffffffffda RBX: 00007fa35ca15fa8 RCX: 00007fa35c79ce59 [ 272.761946][ T8062] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa35ca15fa8 [ 272.761960][ T8062] RBP: 00007fa35ca15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 272.761974][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.761988][ T8062] R13: 00007fa35ca16038 R14: 00007ffc1d122800 R15: 00007ffc1d1228e8 [ 272.762018][ T8062] [ 273.460799][ T8076] FAULT_INJECTION: forcing a failure. [ 273.460799][ T8076] name failslab, interval 1, probability 0, space 0, times 0 [ 273.533110][ T8076] CPU: 1 UID: 0 PID: 8076 Comm: syz.1.451 Not tainted syzkaller #0 PREEMPT(full) [ 273.533154][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.533175][ T8076] Call Trace: [ 273.533186][ T8076] [ 273.533199][ T8076] dump_stack_lvl+0x100/0x190 [ 273.533244][ T8076] should_fail_ex.cold+0x5/0xa [ 273.533288][ T8076] should_failslab+0xc2/0x120 [ 273.533330][ T8076] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 273.533387][ T8076] ? __d_alloc+0x34/0xa40 [ 273.533444][ T8076] __d_alloc+0x34/0xa40 [ 273.533496][ T8076] d_alloc+0x4a/0x1e0 [ 273.533545][ T8076] lookup_one_qstr_excl+0x171/0x250 [ 273.533605][ T8076] start_dirop+0x59/0xb0 [ 273.533645][ T8076] simple_start_creating+0xf9/0x110 [ 273.533688][ T8076] ? __pfx_simple_start_creating+0x10/0x10 [ 273.533731][ T8076] ? mntput+0x70/0xa0 [ 273.533767][ T8076] ? simple_pin_fs+0xa3/0x190 [ 273.533806][ T8076] debugfs_start_creating.part.0+0x82/0x170 [ 273.533863][ T8076] __debugfs_create_file+0xb3/0x4f0 [ 273.533926][ T8076] debugfs_create_file_full+0x41/0x60 [ 273.533986][ T8076] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 273.534034][ T8076] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 273.534087][ T8076] ? ida_alloc_range+0x70d/0x830 [ 273.534153][ T8076] ? lockdep_init_map_type+0x5c/0x250 [ 273.534195][ T8076] preinit_net.part.0+0x252/0x920 [ 273.534245][ T8076] copy_net_ns+0x339/0x7c0 [ 273.534298][ T8076] create_new_namespaces+0x3ea/0xac0 [ 273.534353][ T8076] unshare_nsproxy_namespaces+0xf2/0x220 [ 273.534401][ T8076] ksys_unshare+0x438/0xab0 [ 273.534454][ T8076] ? __pfx_ksys_unshare+0x10/0x10 [ 273.534502][ T8076] ? xfd_validate_state+0x129/0x190 [ 273.534536][ T8076] ? ksys_write+0x1ac/0x250 [ 273.534588][ T8076] __x64_sys_unshare+0x31/0x40 [ 273.534638][ T8076] do_syscall_64+0x10b/0xf80 [ 273.534669][ T8076] ? clear_bhb_loop+0x40/0x90 [ 273.534711][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.534747][ T8076] RIP: 0033:0x7f051799ce59 [ 273.534773][ T8076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.534805][ T8076] RSP: 002b:00007f05188fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 273.534837][ T8076] RAX: ffffffffffffffda RBX: 00007f0517c16090 RCX: 00007f051799ce59 [ 273.534859][ T8076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 273.534878][ T8076] RBP: 00007f0517a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 273.534898][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.534917][ T8076] R13: 00007f0517c16128 R14: 00007f0517c16090 R15: 00007ffe37efdfa8 [ 273.534961][ T8076] [ 276.126133][ T8110] netlink: 25 bytes leftover after parsing attributes in process `syz.3.456'. [ 282.494071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 283.821163][ T30] audit: type=1326 audit(1779517279.420:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.480" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ff0d9ce59 code=0x0 [ 287.795674][ T8282] FAULT_INJECTION: forcing a failure. [ 287.795674][ T8282] name fail_futex, interval 1, probability 0, space 0, times 0 [ 287.832509][ T8282] CPU: 0 UID: 0 PID: 8282 Comm: syz.3.495 Not tainted syzkaller #0 PREEMPT(full) [ 287.832553][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.832574][ T8282] Call Trace: [ 287.832584][ T8282] [ 287.832597][ T8282] dump_stack_lvl+0x100/0x190 [ 287.832640][ T8282] should_fail_ex.cold+0x5/0xa [ 287.832683][ T8282] get_futex_key+0x1d2/0x1510 [ 287.832723][ T8282] ? __pfx_get_futex_key+0x10/0x10 [ 287.832761][ T8282] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.832824][ T8282] futex_wake+0xea/0x530 [ 287.832874][ T8282] ? __pfx_futex_wake+0x10/0x10 [ 287.832936][ T8282] do_futex+0x32b/0x350 [ 287.832974][ T8282] ? __pfx_do_futex+0x10/0x10 [ 287.833011][ T8282] ? fput+0x79/0x100 [ 287.833058][ T8282] ? __sys_sendmsg+0x18f/0x220 [ 287.833104][ T8282] __x64_sys_futex+0x34f/0x4d0 [ 287.833148][ T8282] ? __pfx___x64_sys_futex+0x10/0x10 [ 287.833194][ T8282] ? rcu_is_watching+0x12/0xc0 [ 287.833242][ T8282] do_syscall_64+0x10b/0xf80 [ 287.833272][ T8282] ? clear_bhb_loop+0x40/0x90 [ 287.833314][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.833357][ T8282] RIP: 0033:0x7f4ab1f9ce59 [ 287.833385][ T8282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.833421][ T8282] RSP: 002b:00007f4ab2ed10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 287.833451][ T8282] RAX: ffffffffffffffda RBX: 00007f4ab2215fa8 RCX: 00007f4ab1f9ce59 [ 287.833472][ T8282] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4ab2215fac [ 287.833493][ T8282] RBP: 00007f4ab2215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 287.833513][ T8282] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000000 [ 287.833533][ T8282] R13: 00007f4ab2216038 R14: 00007fff1f11e230 R15: 00007fff1f11e318 [ 287.833575][ T8282] [ 288.311083][ T8292] smpboot: CPU 1 is now offline [ 289.546328][ T8313] FAULT_INJECTION: forcing a failure. [ 289.546328][ T8313] name failslab, interval 1, probability 0, space 0, times 0 [ 289.654458][ T8313] CPU: 0 UID: 0 PID: 8313 Comm: syz.0.499 Not tainted syzkaller #0 PREEMPT(full) [ 289.654488][ T8313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.654502][ T8313] Call Trace: [ 289.654509][ T8313] [ 289.654518][ T8313] dump_stack_lvl+0x100/0x190 [ 289.654548][ T8313] should_fail_ex.cold+0x5/0xa [ 289.654580][ T8313] should_failslab+0xc2/0x120 [ 289.654608][ T8313] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 289.654645][ T8313] ? ptlock_alloc+0x1f/0x70 [ 289.654679][ T8313] ? __lock_acquire+0x4a5/0x2630 [ 289.654705][ T8313] ptlock_alloc+0x1f/0x70 [ 289.654739][ T8313] pte_alloc_one+0x82/0x3d0 [ 289.654772][ T8313] __pte_alloc+0x6d/0x3e0 [ 289.654798][ T8313] ? __pfx___pte_alloc+0x10/0x10 [ 289.654826][ T8313] ? do_raw_spin_lock+0x128/0x260 [ 289.654852][ T8313] ? find_held_lock+0x2b/0x80 [ 289.654885][ T8313] do_anonymous_page+0x13c6/0x2050 [ 289.654924][ T8313] ? __pmd_alloc+0x3fb/0x950 [ 289.654957][ T8313] __handle_mm_fault+0x1d2c/0x2a00 [ 289.654997][ T8313] ? mt_find+0x45e/0x8e0 [ 289.655021][ T8313] ? __pfx___handle_mm_fault+0x10/0x10 [ 289.655055][ T8313] ? __pfx_mt_find+0x10/0x10 [ 289.655093][ T8313] ? find_vma+0xbf/0x140 [ 289.655118][ T8313] ? __pfx_find_vma+0x10/0x10 [ 289.655147][ T8313] handle_mm_fault+0x36d/0xa20 [ 289.655188][ T8313] do_user_addr_fault+0x74c/0x12f0 [ 289.655220][ T8313] ? trace_page_fault_kernel+0x7a/0x200 [ 289.655257][ T8313] exc_page_fault+0x6f/0xd0 [ 289.655295][ T8313] asm_exc_page_fault+0x26/0x30 [ 289.655318][ T8313] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 289.655348][ T8313] Code: c4 10 e9 84 9b 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 [ 289.655370][ T8313] RSP: 0018:ffffc900033a7a90 EFLAGS: 00050202 [ 289.655388][ T8313] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000004 [ 289.655402][ T8313] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffffc900033a7af8 [ 289.655415][ T8313] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000674f5f [ 289.655429][ T8313] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 289.655442][ T8313] R13: ffffc900033a7af8 R14: 1ffff92000674f74 R15: 0000000000000001 [ 289.655470][ T8313] _copy_from_user+0x98/0xd0 [ 289.655496][ T8313] vt_do_kdsk_ioctl+0x94/0xbc0 [ 289.655524][ T8313] ? __pfx_vt_do_kdsk_ioctl+0x10/0x10 [ 289.655550][ T8313] ? bpf_lsm_capable+0x9/0x10 [ 289.655577][ T8313] ? security_capable+0x80/0x260 [ 289.655617][ T8313] vt_ioctl+0x22f/0x31a0 [ 289.655649][ T8313] ? __pfx_vt_ioctl+0x10/0x10 [ 289.655676][ T8313] ? find_held_lock+0x2b/0x80 [ 289.655705][ T8313] ? tomoyo_path_number_perm+0x28f/0x580 [ 289.655731][ T8313] ? tomoyo_path_number_perm+0x28f/0x580 [ 289.655762][ T8313] ? tomoyo_path_number_perm+0x188/0x580 [ 289.655790][ T8313] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 289.655821][ T8313] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.655859][ T8313] ? __pfx_vt_ioctl+0x10/0x10 [ 289.655888][ T8313] tty_ioctl+0x26a/0x1640 [ 289.655927][ T8313] ? __pfx_tty_ioctl+0x10/0x10 [ 289.655971][ T8313] ? find_held_lock+0x2b/0x80 [ 289.656001][ T8313] ? __fget_files+0x215/0x3d0 [ 289.656027][ T8313] ? hook_file_ioctl_common+0x149/0x410 [ 289.656061][ T8313] ? __fget_files+0x21f/0x3d0 [ 289.656092][ T8313] ? __pfx_tty_ioctl+0x10/0x10 [ 289.656130][ T8313] __x64_sys_ioctl+0x18e/0x210 [ 289.656157][ T8313] do_syscall_64+0x10b/0xf80 [ 289.656176][ T8313] ? clear_bhb_loop+0x40/0x90 [ 289.656204][ T8313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.656227][ T8313] RIP: 0033:0x7fa35c79ce59 [ 289.656249][ T8313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.656271][ T8313] RSP: 002b:00007fa35d6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.656291][ T8313] RAX: ffffffffffffffda RBX: 00007fa35ca15fa0 RCX: 00007fa35c79ce59 [ 289.656306][ T8313] RDX: 0000000000000001 RSI: 0000000000004b47 RDI: 0000000000000003 [ 289.656319][ T8313] RBP: 00007fa35d6a5090 R08: 0000000000000000 R09: 0000000000000000 [ 289.656332][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.656345][ T8313] R13: 00007fa35ca16038 R14: 00007fa35ca15fa0 R15: 00007ffc1d1228e8 [ 289.656374][ T8313] [ 290.364631][ T7239] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 290.372232][ T7239] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 290.669675][ T8315] Process accounting resumed [ 290.890558][ T8328] FAULT_INJECTION: forcing a failure. [ 290.890558][ T8328] name fail_futex, interval 1, probability 0, space 0, times 0 [ 291.034360][ T8328] CPU: 0 UID: 0 PID: 8328 Comm: syz.1.501 Not tainted syzkaller #0 PREEMPT(full) [ 291.034394][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.034408][ T8328] Call Trace: [ 291.034415][ T8328] [ 291.034425][ T8328] dump_stack_lvl+0x100/0x190 [ 291.034455][ T8328] should_fail_ex.cold+0x5/0xa [ 291.034485][ T8328] get_futex_key+0x1d2/0x1510 [ 291.034514][ T8328] ? __pfx_get_futex_key+0x10/0x10 [ 291.034548][ T8328] futex_wake+0xea/0x530 [ 291.034579][ T8328] ? rcu_is_watching+0x12/0xc0 [ 291.034609][ T8328] ? __pfx_futex_wake+0x10/0x10 [ 291.034644][ T8328] ? putname+0xb1/0x110 [ 291.034675][ T8328] ? kmem_cache_free+0x127/0x6c0 [ 291.034718][ T8328] do_futex+0x32b/0x350 [ 291.034745][ T8328] ? __pfx_do_futex+0x10/0x10 [ 291.034770][ T8328] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.034816][ T8328] __x64_sys_futex+0x34f/0x4d0 [ 291.034844][ T8328] ? __x64_sys_openat+0x12d/0x210 [ 291.034883][ T8328] ? __pfx___x64_sys_futex+0x10/0x10 [ 291.034915][ T8328] ? rcu_is_watching+0x12/0xc0 [ 291.034948][ T8328] do_syscall_64+0x10b/0xf80 [ 291.034970][ T8328] ? clear_bhb_loop+0x40/0x90 [ 291.034999][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.035023][ T8328] RIP: 0033:0x7f051799ce59 [ 291.035050][ T8328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.035073][ T8328] RSP: 002b:00007f05188fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 291.035095][ T8328] RAX: ffffffffffffffda RBX: 00007f0517c16098 RCX: 00007f051799ce59 [ 291.035111][ T8328] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0517c1609c [ 291.035125][ T8328] RBP: 00007f0517c16090 R08: 0000000000000001 R09: 0000000000000000 [ 291.035140][ T8328] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 291.035154][ T8328] R13: 00007f0517c16128 R14: 00007ffe37efdec0 R15: 00007ffe37efdfa8 [ 291.035183][ T8328] [ 293.938370][ T8369] FAULT_INJECTION: forcing a failure. [ 293.938370][ T8369] name fail_futex, interval 1, probability 0, space 0, times 0 [ 294.008901][ T8369] CPU: 0 UID: 0 PID: 8369 Comm: syz.3.510 Not tainted syzkaller #0 PREEMPT(full) [ 294.008941][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.008955][ T8369] Call Trace: [ 294.008962][ T8369] [ 294.008971][ T8369] dump_stack_lvl+0x100/0x190 [ 294.009002][ T8369] should_fail_ex.cold+0x5/0xa [ 294.009027][ T8369] ? css_rstat_updated+0x1ce/0x5a0 [ 294.009070][ T8369] get_futex_key+0x1d2/0x1510 [ 294.009097][ T8369] ? __pfx_get_futex_key+0x10/0x10 [ 294.009125][ T8369] ? pick_eevdf+0x4d3/0x860 [ 294.009165][ T8369] futex_wait_setup+0x83/0x510 [ 294.009205][ T8369] __futex_wait+0x19f/0x300 [ 294.009240][ T8369] ? __pfx___futex_wait+0x10/0x10 [ 294.009271][ T8369] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 294.009313][ T8369] ? __pfx_futex_wake_mark+0x10/0x10 [ 294.009350][ T8369] ? find_held_lock+0x2b/0x80 [ 294.009381][ T8369] ? futex_wake+0x456/0x530 [ 294.009419][ T8369] futex_wait+0xe6/0x370 [ 294.009451][ T8369] ? __pfx_futex_wait+0x10/0x10 [ 294.009499][ T8369] do_futex+0x1ef/0x350 [ 294.009525][ T8369] ? __pfx_do_futex+0x10/0x10 [ 294.009559][ T8369] __x64_sys_futex+0x34f/0x4d0 [ 294.009590][ T8369] ? __pfx___x64_sys_futex+0x10/0x10 [ 294.009618][ T8369] ? __pfx___do_sys_prctl+0x10/0x10 [ 294.009646][ T8369] ? rcu_is_watching+0x12/0xc0 [ 294.009679][ T8369] do_syscall_64+0x10b/0xf80 [ 294.009700][ T8369] ? clear_bhb_loop+0x40/0x90 [ 294.009729][ T8369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.009753][ T8369] RIP: 0033:0x7f4ab1f9ce59 [ 294.009772][ T8369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.009794][ T8369] RSP: 002b:00007f4ab2ed10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 294.009819][ T8369] RAX: ffffffffffffffda RBX: 00007f4ab2215fa8 RCX: 00007f4ab1f9ce59 [ 294.009835][ T8369] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4ab2215fa8 [ 294.009849][ T8369] RBP: 00007f4ab2215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 294.009863][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.009877][ T8369] R13: 00007f4ab2216038 R14: 00007fff1f11e230 R15: 00007fff1f11e318 [ 294.009906][ T8369] [ 295.135541][ T8388] mtrr: base(0x0000) is not aligned on a size(0x30000) boundary [ 296.633159][ T8405] FAULT_INJECTION: forcing a failure. [ 296.633159][ T8405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.737225][ T8405] CPU: 0 UID: 0 PID: 8405 Comm: syz.0.518 Not tainted syzkaller #0 PREEMPT(full) [ 296.737255][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.737269][ T8405] Call Trace: [ 296.737276][ T8405] [ 296.737284][ T8405] dump_stack_lvl+0x100/0x190 [ 296.737314][ T8405] should_fail_ex.cold+0x5/0xa [ 296.737343][ T8405] _copy_to_user+0x32/0xd0 [ 296.737369][ T8405] simple_read_from_buffer+0xcb/0x170 [ 296.737399][ T8405] proc_fail_nth_read+0x1af/0x230 [ 296.737438][ T8405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.737478][ T8405] ? rw_verify_area+0xce/0x6d0 [ 296.737518][ T8405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.737555][ T8405] vfs_read+0x1e4/0xb30 [ 296.737585][ T8405] ? __pfx_vfs_read+0x10/0x10 [ 296.737611][ T8405] ? __fget_files+0x215/0x3d0 [ 296.737645][ T8405] ? __fget_files+0x21f/0x3d0 [ 296.737683][ T8405] ksys_read+0x12a/0x250 [ 296.737715][ T8405] ? __pfx_ksys_read+0x10/0x10 [ 296.737744][ T8405] ? rcu_is_watching+0x12/0xc0 [ 296.737777][ T8405] do_syscall_64+0x10b/0xf80 [ 296.737798][ T8405] ? clear_bhb_loop+0x40/0x90 [ 296.737826][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.737850][ T8405] RIP: 0033:0x7fa35c75d68e [ 296.737867][ T8405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 296.737889][ T8405] RSP: 002b:00007fa35d6a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.737911][ T8405] RAX: ffffffffffffffda RBX: 00007fa35d6a56c0 RCX: 00007fa35c75d68e [ 296.737926][ T8405] RDX: 000000000000000f RSI: 00007fa35d6a50a0 RDI: 0000000000000004 [ 296.737939][ T8405] RBP: 00007fa35d6a5090 R08: 0000000000000000 R09: 0000000000000000 [ 296.737953][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.737966][ T8405] R13: 00007fa35ca16038 R14: 00007fa35ca15fa0 R15: 00007ffc1d1228e8 [ 296.737995][ T8405] [ 302.105982][ T8495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.498836][ T8503] FAULT_INJECTION: forcing a failure. [ 302.498836][ T8503] name failslab, interval 1, probability 0, space 0, times 0 [ 302.569824][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.0.536 Not tainted syzkaller #0 PREEMPT(full) [ 302.569857][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.569881][ T8503] Call Trace: [ 302.569889][ T8503] [ 302.569898][ T8503] dump_stack_lvl+0x100/0x190 [ 302.569929][ T8503] should_fail_ex.cold+0x5/0xa [ 302.569960][ T8503] should_failslab+0xc2/0x120 [ 302.569989][ T8503] __kmalloc_cache_noprof+0x7a/0x6f0 [ 302.570025][ T8503] ? nl80211_dump_station+0x25e/0xa80 [ 302.570070][ T8503] nl80211_dump_station+0x25e/0xa80 [ 302.570110][ T8503] ? __pfx_nl80211_dump_station+0x10/0x10 [ 302.570180][ T8503] ? kmalloc_reserve+0xf9/0x350 [ 302.570217][ T8503] ? __asan_memset+0x23/0x50 [ 302.570255][ T8503] ? __alloc_skb+0x5b7/0x710 [ 302.570282][ T8503] ? __pfx___alloc_skb+0x10/0x10 [ 302.570314][ T8503] genl_dumpit+0x125/0x230 [ 302.570340][ T8503] netlink_dump+0x532/0xd00 [ 302.570379][ T8503] ? __pfx_netlink_dump+0x10/0x10 [ 302.570423][ T8503] ? __asan_memset+0x23/0x50 [ 302.570461][ T8503] ? genl_start+0x67a/0x970 [ 302.570488][ T8503] __netlink_dump_start+0x6d6/0x990 [ 302.570529][ T8503] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 302.570557][ T8503] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 302.570591][ T8503] ? __pfx_genl_get_cmd+0x10/0x10 [ 302.570612][ T8503] ? __pfx_genl_start+0x10/0x10 [ 302.570633][ T8503] ? __pfx_genl_dumpit+0x10/0x10 [ 302.570655][ T8503] ? __pfx_genl_done+0x10/0x10 [ 302.570681][ T8503] ? __dev_queue_xmit+0xa10/0x4950 [ 302.570703][ T8503] ? __radix_tree_lookup+0x217/0x2b0 [ 302.570744][ T8503] genl_rcv_msg+0x471/0x800 [ 302.570772][ T8503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.570797][ T8503] ? __pfx_nl80211_dump_station+0x10/0x10 [ 302.570840][ T8503] netlink_rcv_skb+0x159/0x420 [ 302.570878][ T8503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.570904][ T8503] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.570954][ T8503] ? netlink_deliver_tap+0x1ae/0xcc0 [ 302.570995][ T8503] genl_rcv+0x28/0x40 [ 302.571015][ T8503] netlink_unicast+0x585/0x850 [ 302.571063][ T8503] ? __pfx_netlink_unicast+0x10/0x10 [ 302.571109][ T8503] netlink_sendmsg+0x8b0/0xda0 [ 302.571152][ T8503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.571188][ T8503] ? __import_iovec+0x1d2/0x640 [ 302.571219][ T8503] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 302.571264][ T8503] ____sys_sendmsg+0x9e1/0xb70 [ 302.571302][ T8503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.571343][ T8503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.571387][ T8503] ? __pfx_futex_wake_mark+0x10/0x10 [ 302.571424][ T8503] ___sys_sendmsg+0x190/0x1e0 [ 302.571465][ T8503] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.571540][ T8503] __sys_sendmsg+0x170/0x220 [ 302.571571][ T8503] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.571601][ T8503] ? __x64_sys_futex+0x34f/0x4d0 [ 302.571639][ T8503] ? rcu_is_watching+0x12/0xc0 [ 302.571673][ T8503] do_syscall_64+0x10b/0xf80 [ 302.571694][ T8503] ? clear_bhb_loop+0x40/0x90 [ 302.571724][ T8503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.571749][ T8503] RIP: 0033:0x7fa35c79ce59 [ 302.571768][ T8503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.571791][ T8503] RSP: 002b:00007fa35d6a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.571814][ T8503] RAX: ffffffffffffffda RBX: 00007fa35ca15fa0 RCX: 00007fa35c79ce59 [ 302.571830][ T8503] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 302.571844][ T8503] RBP: 00007fa35c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 302.571858][ T8503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.571872][ T8503] R13: 00007fa35ca16038 R14: 00007fa35ca15fa0 R15: 00007ffc1d1228e8 [ 302.571903][ T8503] [ 308.320921][ T8591] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.553'. [ 310.148234][ T8597] nbd: illegal input index -1024 [ 311.519848][ T8619] FAULT_INJECTION: forcing a failure. [ 311.519848][ T8619] name fail_futex, interval 1, probability 0, space 0, times 0 [ 311.635806][ T8619] CPU: 0 UID: 0 PID: 8619 Comm: syz.0.559 Not tainted syzkaller #0 PREEMPT(full) [ 311.635845][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.635859][ T8619] Call Trace: [ 311.635867][ T8619] [ 311.635876][ T8619] dump_stack_lvl+0x100/0x190 [ 311.635914][ T8619] should_fail_ex.cold+0x5/0xa [ 311.635944][ T8619] get_futex_key+0x1d2/0x1510 [ 311.635972][ T8619] ? __pfx_get_futex_key+0x10/0x10 [ 311.635996][ T8619] ? find_held_lock+0x2b/0x80 [ 311.636037][ T8619] futex_wake+0xea/0x530 [ 311.636067][ T8619] ? prctl_set_mm+0x98b/0xf10 [ 311.636097][ T8619] ? __pfx_futex_wake+0x10/0x10 [ 311.636129][ T8619] ? prctl_set_mm+0x586/0xf10 [ 311.636165][ T8619] do_futex+0x32b/0x350 [ 311.636192][ T8619] ? __pfx_do_futex+0x10/0x10 [ 311.636226][ T8619] __x64_sys_futex+0x34f/0x4d0 [ 311.636276][ T8619] ? __pfx___x64_sys_futex+0x10/0x10 [ 311.636304][ T8619] ? __pfx___do_sys_prctl+0x10/0x10 [ 311.636332][ T8619] ? rcu_is_watching+0x12/0xc0 [ 311.636366][ T8619] do_syscall_64+0x10b/0xf80 [ 311.636387][ T8619] ? clear_bhb_loop+0x40/0x90 [ 311.636416][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.636443][ T8619] RIP: 0033:0x7fa35c79ce59 [ 311.636464][ T8619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.636488][ T8619] RSP: 002b:00007fa35d6a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 311.636510][ T8619] RAX: ffffffffffffffda RBX: 00007fa35ca15fa8 RCX: 00007fa35c79ce59 [ 311.636526][ T8619] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa35ca15fac [ 311.636540][ T8619] RBP: 00007fa35ca15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 311.636554][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.636568][ T8619] R13: 00007fa35ca16038 R14: 00007ffc1d122800 R15: 00007ffc1d1228e8 [ 311.636597][ T8619] [ 316.618741][ T30] audit: type=1800 audit(1779517312.220:18): pid=8649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.563" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 317.269938][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.278798][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.911082][ T8684] FAULT_INJECTION: forcing a failure. [ 318.911082][ T8684] name fail_futex, interval 1, probability 0, space 0, times 0 [ 319.058141][ T8684] CPU: 0 UID: 0 PID: 8684 Comm: syz.3.567 Not tainted syzkaller #0 PREEMPT(full) [ 319.058171][ T8684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.058185][ T8684] Call Trace: [ 319.058193][ T8684] [ 319.058202][ T8684] dump_stack_lvl+0x100/0x190 [ 319.058231][ T8684] should_fail_ex.cold+0x5/0xa [ 319.058259][ T8684] get_futex_key+0x295/0x1510 [ 319.058287][ T8684] ? __pfx_get_futex_key+0x10/0x10 [ 319.058309][ T8684] ? lock_acquire+0x1b1/0x370 [ 319.058339][ T8684] futex_wake+0xea/0x530 [ 319.058372][ T8684] ? __pfx_futex_wake+0x10/0x10 [ 319.058402][ T8684] ? exit_mm_release+0x19/0x30 [ 319.058444][ T8684] do_futex+0x32b/0x350 [ 319.058469][ T8684] ? __pfx_do_futex+0x10/0x10 [ 319.058493][ T8684] ? __might_fault+0xc5/0x140 [ 319.058537][ T8684] mm_release+0x24a/0x2f0 [ 319.058567][ T8684] do_exit+0x707/0x2af0 [ 319.058600][ T8684] ? __pfx___might_resched+0x10/0x10 [ 319.058632][ T8684] ? __pfx_do_exit+0x10/0x10 [ 319.058667][ T8684] ? do_raw_spin_lock+0x128/0x260 [ 319.058694][ T8684] ? find_held_lock+0x2b/0x80 [ 319.058723][ T8684] ? get_signal+0x7e5/0x2210 [ 319.058761][ T8684] do_group_exit+0xd5/0x2a0 [ 319.058801][ T8684] get_signal+0x20ff/0x2210 [ 319.058840][ T8684] ? __pfx_get_signal+0x10/0x10 [ 319.058873][ T8684] ? do_futex+0x192/0x350 [ 319.058900][ T8684] arch_do_signal_or_restart+0x91/0x7a0 [ 319.058937][ T8684] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 319.058983][ T8684] ? rcu_is_watching+0x12/0xc0 [ 319.059016][ T8684] exit_to_user_mode_loop+0x8b/0x4f0 [ 319.059038][ T8684] ? rcu_is_watching+0x12/0xc0 [ 319.059069][ T8684] do_syscall_64+0x6f2/0xf80 [ 319.059090][ T8684] ? clear_bhb_loop+0x40/0x90 [ 319.059118][ T8684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.059142][ T8684] RIP: 0033:0x7f4ab1f9ce59 [ 319.059160][ T8684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.059183][ T8684] RSP: 002b:00007f4ab2eb00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 319.059205][ T8684] RAX: fffffffffffffe00 RBX: 00007f4ab2216098 RCX: 00007f4ab1f9ce59 [ 319.059221][ T8684] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4ab2216098 [ 319.059235][ T8684] RBP: 00007f4ab2216090 R08: 0000000000000000 R09: 0000000000000000 [ 319.059249][ T8684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.059262][ T8684] R13: 00007f4ab2216128 R14: 00007fff1f11e230 R15: 00007fff1f11e318 [ 319.059291][ T8684] [ 321.070999][ T8716] FAULT_INJECTION: forcing a failure. [ 321.070999][ T8716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.189300][ T8716] CPU: 0 UID: 0 PID: 8716 Comm: syz.2.572 Not tainted syzkaller #0 PREEMPT(full) [ 321.189342][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.189357][ T8716] Call Trace: [ 321.189363][ T8716] [ 321.189372][ T8716] dump_stack_lvl+0x100/0x190 [ 321.189400][ T8716] should_fail_ex.cold+0x5/0xa [ 321.189428][ T8716] _copy_from_user+0x2e/0xd0 [ 321.189454][ T8716] msr_io+0x93/0x480 [ 321.189483][ T8716] ? __pfx_do_get_msr+0x10/0x10 [ 321.189520][ T8716] ? __pfx_msr_io+0x10/0x10 [ 321.189550][ T8716] ? __pfx_widen_string+0x10/0x10 [ 321.189578][ T8716] ? __kernel_text_address+0xd/0x30 [ 321.189614][ T8716] kvm_arch_vcpu_ioctl+0x1950/0x5730 [ 321.189646][ T8716] ? kvm_arch_vcpu_ioctl+0x1928/0x5730 [ 321.189685][ T8716] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 321.189717][ T8716] ? __pfx_stack_trace_save+0x10/0x10 [ 321.189750][ T8716] ? stack_depot_save_flags+0x27/0x9d0 [ 321.189779][ T8716] ? __lock_acquire+0x4a5/0x2630 [ 321.189801][ T8716] ? tomoyo_path_number_perm+0x46d/0x580 [ 321.189832][ T8716] ? __lock_acquire+0x4a5/0x2630 [ 321.189853][ T8716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.189887][ T8716] ? lock_acquire+0x1b1/0x370 [ 321.189912][ T8716] ? rcu_is_watching+0x12/0xc0 [ 321.189940][ T8716] ? trace_contention_end+0x122/0x170 [ 321.189966][ T8716] ? __mutex_lock+0x26d/0x1b10 [ 321.189988][ T8716] ? kvm_vcpu_ioctl+0x322/0x1720 [ 321.190016][ T8716] ? __pfx___mutex_lock+0x10/0x10 [ 321.190037][ T8716] ? kasan_quarantine_put+0x104/0x240 [ 321.190063][ T8716] ? tomoyo_path_number_perm+0x28f/0x580 [ 321.190095][ T8716] ? tomoyo_path_number_perm+0x188/0x580 [ 321.190125][ T8716] ? kvm_vcpu_ioctl+0x8a0/0x1720 [ 321.190145][ T8716] kvm_vcpu_ioctl+0x8a0/0x1720 [ 321.190188][ T8716] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 321.190211][ T8716] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 321.190248][ T8716] ? do_vfs_ioctl+0x226/0x13e0 [ 321.190272][ T8716] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 321.190303][ T8716] ? find_held_lock+0x2b/0x80 [ 321.190332][ T8716] ? __fget_files+0x215/0x3d0 [ 321.190361][ T8716] ? hook_file_ioctl_common+0x149/0x410 [ 321.190394][ T8716] ? __fget_files+0x21f/0x3d0 [ 321.190426][ T8716] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 321.190450][ T8716] __x64_sys_ioctl+0x18e/0x210 [ 321.190475][ T8716] do_syscall_64+0x10b/0xf80 [ 321.190495][ T8716] ? clear_bhb_loop+0x40/0x90 [ 321.190523][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.190547][ T8716] RIP: 0033:0x7f3ff0d9ce59 [ 321.190565][ T8716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.190591][ T8716] RSP: 002b:00007f3ff1c84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.190615][ T8716] RAX: ffffffffffffffda RBX: 00007f3ff1015fa0 RCX: 00007f3ff0d9ce59 [ 321.190630][ T8716] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000004 [ 321.190644][ T8716] RBP: 00007f3ff1c84090 R08: 0000000000000000 R09: 0000000000000000 [ 321.190658][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.190672][ T8716] R13: 00007f3ff1016038 R14: 00007f3ff1015fa0 R15: 00007ffdf68afa48 [ 321.190702][ T8716] [ 321.849808][ T8718] random: crng reseeded on system resumption [ 322.210553][ T8716] Process accounting paused [ 323.035448][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 323.968762][ T8738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.576'. [ 325.361222][ T8750] lo: entered allmulticast mode [ 325.407169][ T8750] lo: left allmulticast mode [ 330.983236][ T8828] nbd: illegal input index 37139 [ 331.733863][ T8836] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.778670][ T8836] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 331.883473][ T8836] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 331.913670][ T8836] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 331.959783][ T8836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 331.988406][ T8836] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 332.032018][ T8836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.059140][ T8836] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 333.183530][ T7238] Bluetooth: hci0: command 0x0406 tx timeout [ 333.903708][ T7238] Bluetooth: hci1: command 0x0406 tx timeout [ 333.983693][ T7238] Bluetooth: hci2: command 0x0406 tx timeout [ 334.063551][ T7238] Bluetooth: hci3: command 0x0406 tx timeout [ 334.301975][ T8881] sctp: [Deprecated]: syz.2.600 (pid 8881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.301975][ T8881] Use struct sctp_sack_info instead [ 335.264420][ T7238] Bluetooth: hci0: command 0x0406 tx timeout [ 335.985331][ T7238] Bluetooth: hci1: command 0x0406 tx timeout [ 336.063516][ T7238] Bluetooth: hci2: command 0x0406 tx timeout [ 336.144250][ T7238] Bluetooth: hci3: command 0x0406 tx timeout [ 336.804940][ T8913] FAULT_INJECTION: forcing a failure. [ 336.804940][ T8913] name failslab, interval 1, probability 0, space 0, times 0 [ 336.977538][ T8913] CPU: 0 UID: 0 PID: 8913 Comm: syz.3.607 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.977578][ T8913] Tainted: [L]=SOFTLOCKUP [ 336.977586][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.977601][ T8913] Call Trace: [ 336.977609][ T8913] [ 336.977618][ T8913] dump_stack_lvl+0x100/0x190 [ 336.977649][ T8913] should_fail_ex.cold+0x5/0xa [ 336.977680][ T8913] should_failslab+0xc2/0x120 [ 336.977710][ T8913] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 336.977751][ T8913] ? __d_alloc+0x34/0xa40 [ 336.977790][ T8913] __d_alloc+0x34/0xa40 [ 336.977822][ T8913] ? security_inode_alloc+0xcf/0x2c0 [ 336.977850][ T8913] d_alloc_pseudo+0x1c/0xc0 [ 336.977874][ T8913] alloc_file_pseudo+0xcf/0x230 [ 336.977913][ T8913] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 336.977952][ T8913] ? security_inode_init_security_anon+0x7b/0x230 [ 336.977997][ T8913] __anon_inode_getfile+0xe8/0x280 [ 336.978037][ T8913] ? _copy_to_user+0xaf/0xd0 [ 336.978063][ T8913] io_uring_setup.cold+0x1951/0x1c6e [ 336.978105][ T8913] ? __pfx_io_uring_setup+0x10/0x10 [ 336.978139][ T8913] ? __pfx_do_futex+0x10/0x10 [ 336.978184][ T8913] ? xfd_validate_state+0x129/0x190 [ 336.978218][ T8913] __x64_sys_io_uring_setup+0xc2/0x170 [ 336.978249][ T8913] do_syscall_64+0x10b/0xf80 [ 336.978271][ T8913] ? clear_bhb_loop+0x40/0x90 [ 336.978298][ T8913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.978322][ T8913] RIP: 0033:0x7f4ab1f9ce59 [ 336.978341][ T8913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.978365][ T8913] RSP: 002b:00007f4ab2ed1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 336.978387][ T8913] RAX: ffffffffffffffda RBX: 00007f4ab2215fa0 RCX: 00007f4ab1f9ce59 [ 336.978402][ T8913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 336.978416][ T8913] RBP: 00007f4ab2032d6f R08: 0000000000000000 R09: 0000000000000000 [ 336.978448][ T8913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.978462][ T8913] R13: 00007f4ab2216038 R14: 00007f4ab2215fa0 R15: 00007fff1f11e318 [ 336.978493][ T8913] [ 338.859281][ T8932] ======================================================= [ 338.859281][ T8932] WARNING: The mand mount option has been deprecated and [ 338.859281][ T8932] and is ignored by this kernel. Remove the mand [ 338.859281][ T8932] option from the mount to silence this warning. [ 338.859281][ T8932] ======================================================= [ 338.976735][ T8933] can: request_module (can-proto-0) failed. [ 341.496297][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 343.111785][ T8995] FAULT_INJECTION: forcing a failure. [ 343.111785][ T8995] name fail_futex, interval 1, probability 0, space 0, times 0 [ 343.174357][ T8995] CPU: 0 UID: 0 PID: 8995 Comm: syz.2.622 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.174396][ T8995] Tainted: [L]=SOFTLOCKUP [ 343.174404][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.174419][ T8995] Call Trace: [ 343.174426][ T8995] [ 343.174435][ T8995] dump_stack_lvl+0x100/0x190 [ 343.174465][ T8995] should_fail_ex.cold+0x5/0xa [ 343.174496][ T8995] get_futex_key+0x1d2/0x1510 [ 343.174524][ T8995] ? __pfx_get_futex_key+0x10/0x10 [ 343.174548][ T8995] ? do_mmap+0x93f/0x12f0 [ 343.174578][ T8995] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 343.174618][ T8995] futex_wake+0xea/0x530 [ 343.174652][ T8995] ? __pfx_futex_wake+0x10/0x10 [ 343.174697][ T8995] do_futex+0x32b/0x350 [ 343.174724][ T8995] ? __pfx_do_futex+0x10/0x10 [ 343.174753][ T8995] ? fput+0x79/0x100 [ 343.174789][ T8995] __x64_sys_futex+0x34f/0x4d0 [ 343.174818][ T8995] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 343.174848][ T8995] ? __pfx___x64_sys_futex+0x10/0x10 [ 343.174881][ T8995] ? rcu_is_watching+0x12/0xc0 [ 343.174914][ T8995] do_syscall_64+0x10b/0xf80 [ 343.174936][ T8995] ? clear_bhb_loop+0x40/0x90 [ 343.174966][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.174991][ T8995] RIP: 0033:0x7f3ff0d9ce59 [ 343.175010][ T8995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.175034][ T8995] RSP: 002b:00007f3ff1c840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 343.175058][ T8995] RAX: ffffffffffffffda RBX: 00007f3ff1015fa8 RCX: 00007f3ff0d9ce59 [ 343.175074][ T8995] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3ff1015fac [ 343.175089][ T8995] RBP: 00007f3ff1015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 343.175103][ T8995] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 343.175118][ T8995] R13: 00007f3ff1016038 R14: 00007ffdf68af960 R15: 00007ffdf68afa48 [ 343.175148][ T8995] [ 343.599258][ T30] audit: type=1326 audit(1779517339.180:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8997 comm="syz.0.623" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa35c79ce59 code=0x0 [ 345.397521][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 346.635934][ T9043] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 346.635934][ T9043] program syz.1.630 not setting count and/or reply_len properly [ 348.475722][ T9087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.639'. [ 348.530326][ T9086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.639'. [ 349.652708][ T9105] FAULT_INJECTION: forcing a failure. [ 349.652708][ T9105] name fail_futex, interval 1, probability 0, space 0, times 0 [ 349.716781][ T9105] CPU: 0 UID: 0 PID: 9105 Comm: syz.0.642 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.716820][ T9105] Tainted: [L]=SOFTLOCKUP [ 349.716829][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 349.716844][ T9105] Call Trace: [ 349.716851][ T9105] [ 349.716860][ T9105] dump_stack_lvl+0x100/0x190 [ 349.716892][ T9105] should_fail_ex.cold+0x5/0xa [ 349.716922][ T9105] get_futex_key+0x1d2/0x1510 [ 349.716950][ T9105] ? __pfx_get_futex_key+0x10/0x10 [ 349.716972][ T9105] ? futex_hash+0x2ad/0x370 [ 349.716997][ T9105] ? futex_hash+0x141/0x370 [ 349.717035][ T9105] futex_wake+0xea/0x530 [ 349.717067][ T9105] ? __pfx_futex_wait+0x10/0x10 [ 349.717100][ T9105] ? __pfx_futex_wake+0x10/0x10 [ 349.717144][ T9105] ? do_readv+0x214/0x340 [ 349.717178][ T9105] do_futex+0x32b/0x350 [ 349.717205][ T9105] ? __pfx_do_futex+0x10/0x10 [ 349.717234][ T9105] ? __fget_files+0x21f/0x3d0 [ 349.717269][ T9105] __x64_sys_futex+0x34f/0x4d0 [ 349.717300][ T9105] ? __pfx___x64_sys_futex+0x10/0x10 [ 349.717332][ T9105] ? rcu_is_watching+0x12/0xc0 [ 349.717365][ T9105] do_syscall_64+0x10b/0xf80 [ 349.717387][ T9105] ? clear_bhb_loop+0x40/0x90 [ 349.717415][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.717440][ T9105] RIP: 0033:0x7fa35c79ce59 [ 349.717459][ T9105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.717483][ T9105] RSP: 002b:00007fa35d6a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 349.717506][ T9105] RAX: ffffffffffffffda RBX: 00007fa35ca15fa8 RCX: 00007fa35c79ce59 [ 349.717523][ T9105] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa35ca15fac [ 349.717538][ T9105] RBP: 00007fa35ca15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 349.717552][ T9105] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 349.717567][ T9105] R13: 00007fa35ca16038 R14: 00007ffc1d122800 R15: 00007ffc1d1228e8 [ 349.717596][ T9105] [ 350.598208][ T30] audit: type=1326 audit(1779517346.200:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.643" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ab1f9ce59 code=0x0 [ 353.369369][ T9143] Process accounting resumed [ 353.404350][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 353.858527][ T9159] ubi0: attaching mtd0 [ 354.112081][ T9159] ubi0: scanning is finished [ 354.191652][ T9165] FAULT_INJECTION: forcing a failure. [ 354.191652][ T9165] name fail_futex, interval 1, probability 0, space 0, times 0 [ 354.209389][ T9159] ubi0: empty MTD device detected [ 354.257066][ T9167] random: crng reseeded on system resumption [ 354.268985][ T9165] CPU: 0 UID: 0 PID: 9165 Comm: syz.0.653 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.269024][ T9165] Tainted: [L]=SOFTLOCKUP [ 354.269032][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 354.269046][ T9165] Call Trace: [ 354.269054][ T9165] [ 354.269063][ T9165] dump_stack_lvl+0x100/0x190 [ 354.269095][ T9165] should_fail_ex.cold+0x5/0xa [ 354.269121][ T9165] ? css_rstat_updated+0x1ce/0x5a0 [ 354.269163][ T9165] get_futex_key+0x1d2/0x1510 [ 354.269191][ T9165] ? __pfx_get_futex_key+0x10/0x10 [ 354.269220][ T9165] ? pick_eevdf+0x4d3/0x860 [ 354.269261][ T9165] futex_wait_setup+0x83/0x510 [ 354.269301][ T9165] __futex_wait+0x19f/0x300 [ 354.269336][ T9165] ? __pfx___futex_wait+0x10/0x10 [ 354.269367][ T9165] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 354.269409][ T9165] ? __pfx_futex_wake_mark+0x10/0x10 [ 354.269446][ T9165] ? find_held_lock+0x2b/0x80 [ 354.269477][ T9165] ? futex_wake+0x456/0x530 [ 354.269515][ T9165] futex_wait+0xe6/0x370 [ 354.269548][ T9165] ? __pfx_futex_wait+0x10/0x10 [ 354.269595][ T9165] do_futex+0x1ef/0x350 [ 354.269622][ T9165] ? __pfx_do_futex+0x10/0x10 [ 354.269657][ T9165] __x64_sys_futex+0x34f/0x4d0 [ 354.269688][ T9165] ? __pfx___x64_sys_futex+0x10/0x10 [ 354.269716][ T9165] ? __pfx___do_sys_prctl+0x10/0x10 [ 354.269744][ T9165] ? rcu_is_watching+0x12/0xc0 [ 354.269777][ T9165] do_syscall_64+0x10b/0xf80 [ 354.269798][ T9165] ? clear_bhb_loop+0x40/0x90 [ 354.269828][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.269852][ T9165] RIP: 0033:0x7fa35c79ce59 [ 354.269872][ T9165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.269895][ T9165] RSP: 002b:00007fa35d6a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 354.269925][ T9165] RAX: ffffffffffffffda RBX: 00007fa35ca15fa8 RCX: 00007fa35c79ce59 [ 354.269942][ T9165] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa35ca15fa8 [ 354.269956][ T9165] RBP: 00007fa35ca15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 354.269971][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.269985][ T9165] R13: 00007fa35ca16038 R14: 00007ffc1d122800 R15: 00007ffc1d1228e8 [ 354.270015][ T9165] [ 355.212027][ T9175] netlink: 186 bytes leftover after parsing attributes in process `syz.0.655'. [ 355.553342][ T9178] lo: entered allmulticast mode [ 355.610800][ T9159] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 355.693345][ T9181] lo: left allmulticast mode [ 357.213314][ T30] audit: type=1326 audit(1779517352.810:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.1.658" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f051799ce59 code=0x0 [ 360.342040][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 363.160853][ T9280] FAULT_INJECTION: forcing a failure. [ 363.160853][ T9280] name failslab, interval 1, probability 0, space 0, times 0 [ 363.255236][ T9280] CPU: 0 UID: 0 PID: 9280 Comm: syz.0.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.255274][ T9280] Tainted: [L]=SOFTLOCKUP [ 363.255282][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.255301][ T9280] Call Trace: [ 363.255309][ T9280] [ 363.255318][ T9280] dump_stack_lvl+0x100/0x190 [ 363.255349][ T9280] should_fail_ex.cold+0x5/0xa [ 363.255380][ T9280] should_failslab+0xc2/0x120 [ 363.255409][ T9280] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 363.255449][ T9280] ? mas_preallocate+0x1105/0x14a0 [ 363.255483][ T9280] mas_preallocate+0x1105/0x14a0 [ 363.255519][ T9280] ? __pfx_mas_preallocate+0x10/0x10 [ 363.255553][ T9280] ? vm_area_alloc+0x1f/0x160 [ 363.255592][ T9280] ? lockdep_init_map_type+0x5c/0x250 [ 363.255621][ T9280] __mmap_region+0x124a/0x2da0 [ 363.255664][ T9280] ? __pfx___mmap_region+0x10/0x10 [ 363.255705][ T9280] ? __lock_acquire+0x4a5/0x2630 [ 363.255743][ T9280] ? find_held_lock+0x2b/0x80 [ 363.255774][ T9280] ? debug_object_activate+0x331/0x490 [ 363.255814][ T9280] ? debug_object_activate+0x331/0x490 [ 363.255857][ T9280] ? do_raw_spin_unlock+0x145/0x1e0 [ 363.255887][ T9280] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 363.255952][ T9280] ? rcu_is_watching+0x12/0xc0 [ 363.255983][ T9280] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 363.256016][ T9280] ? lockdep_hardirqs_on+0x78/0x100 [ 363.256093][ T9280] ? futex_unqueue+0x133/0x2c0 [ 363.256128][ T9280] mmap_region+0x35d/0x620 [ 363.256152][ T9280] ? rcu_is_watching+0x12/0xc0 [ 363.256181][ T9280] ? __pfx_mmap_region+0x10/0x10 [ 363.256208][ T9280] ? cap_mmap_addr+0x4b/0x120 [ 363.256247][ T9280] ? bpf_lsm_mmap_addr+0x9/0x30 [ 363.256270][ T9280] ? security_mmap_addr+0x71/0x1e0 [ 363.256300][ T9280] ? __get_unmapped_area+0x255/0x3e0 [ 363.256334][ T9280] do_mmap+0xc63/0x12f0 [ 363.256369][ T9280] ? __pfx_do_mmap+0x10/0x10 [ 363.256399][ T9280] ? __pfx_down_write_killable+0x10/0x10 [ 363.256433][ T9280] vm_mmap_pgoff+0x29e/0x470 [ 363.256470][ T9280] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 363.256503][ T9280] ? do_futex+0x192/0x350 [ 363.256530][ T9280] ? __pfx_do_futex+0x10/0x10 [ 363.256563][ T9280] ksys_mmap_pgoff+0xe4/0x610 [ 363.256593][ T9280] ? __x64_sys_futex+0x358/0x4d0 [ 363.256620][ T9280] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 363.256650][ T9280] ? xfd_validate_state+0x129/0x190 [ 363.256682][ T9280] __x64_sys_mmap+0x125/0x190 [ 363.256712][ T9280] do_syscall_64+0x10b/0xf80 [ 363.256733][ T9280] ? clear_bhb_loop+0x40/0x90 [ 363.256763][ T9280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.256787][ T9280] RIP: 0033:0x7fa35c79ce59 [ 363.256807][ T9280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.256831][ T9280] RSP: 002b:00007fa35d6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 363.256860][ T9280] RAX: ffffffffffffffda RBX: 00007fa35ca15fa0 RCX: 00007fa35c79ce59 [ 363.256876][ T9280] RDX: 0000000000000004 RSI: 0000000000400008 RDI: 0000000000000000 [ 363.256890][ T9280] RBP: 00007fa35c832d6f R08: 0000000000000002 R09: 0000000000008000 [ 363.256905][ T9280] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 363.256919][ T9280] R13: 00007fa35ca16038 R14: 00007fa35ca15fa0 R15: 00007ffc1d1228e8 [ 363.256950][ T9280] [ 365.429590][ T7238] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 365.437989][ T7238] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 365.467240][ T9307] binder: 9306:9307 ioctl c0306201 200000000000 returned -11 [ 367.428431][ T9336] FAULT_INJECTION: forcing a failure. [ 367.428431][ T9336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.634979][ T9336] CPU: 0 UID: 0 PID: 9336 Comm: syz.3.683 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.635022][ T9336] Tainted: [L]=SOFTLOCKUP [ 367.635031][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.635048][ T9336] Call Trace: [ 367.635056][ T9336] [ 367.635067][ T9336] dump_stack_lvl+0x100/0x190 [ 367.635103][ T9336] should_fail_ex.cold+0x5/0xa [ 367.635139][ T9336] _copy_to_user+0x32/0xd0 [ 367.635174][ T9336] simple_read_from_buffer+0xcb/0x170 [ 367.635217][ T9336] proc_fail_nth_read+0x1af/0x230 [ 367.635256][ T9336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.635295][ T9336] ? rw_verify_area+0xce/0x6d0 [ 367.635318][ T9336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.635355][ T9336] vfs_read+0x1e4/0xb30 [ 367.635384][ T9336] ? __pfx_vfs_read+0x10/0x10 [ 367.635410][ T9336] ? __fget_files+0x215/0x3d0 [ 367.635443][ T9336] ? __fget_files+0x21f/0x3d0 [ 367.635478][ T9336] ksys_read+0x12a/0x250 [ 367.635504][ T9336] ? __pfx_ksys_read+0x10/0x10 [ 367.635528][ T9336] ? fput+0x79/0x100 [ 367.635560][ T9336] ? rcu_is_watching+0x12/0xc0 [ 367.635593][ T9336] do_syscall_64+0x10b/0xf80 [ 367.635620][ T9336] ? clear_bhb_loop+0x40/0x90 [ 367.635648][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.635672][ T9336] RIP: 0033:0x7f4ab1f5d68e [ 367.635691][ T9336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 367.635716][ T9336] RSP: 002b:00007f4ab2eaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.635739][ T9336] RAX: ffffffffffffffda RBX: 00007f4ab2eb06c0 RCX: 00007f4ab1f5d68e [ 367.635754][ T9336] RDX: 000000000000000f RSI: 00007f4ab2eb00a0 RDI: 0000000000000009 [ 367.635768][ T9336] RBP: 00007f4ab2eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 367.635782][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.635796][ T9336] R13: 00007f4ab2216128 R14: 00007f4ab2216090 R15: 00007fff1f11e318 [ 367.635825][ T9336] [ 368.812708][ T9354] Line length is too long: Should be less than 4094 [ 369.760215][ T9376] netlink: 338 bytes leftover after parsing attributes in process `syz.3.692'. [ 369.809463][ T9376] netlink: 338 bytes leftover after parsing attributes in process `syz.3.692'. [ 373.612319][ T30] audit: type=1326 audit(1779517369.210:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.1.699" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f051799ce59 code=0x0 [ 375.742759][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.711'. [ 375.882777][ T9495] veth1_macvtap: left promiscuous mode [ 375.895943][ T9495] macsec0: entered promiscuous mode [ 375.907393][ T9495] macsec0: entered allmulticast mode [ 378.712415][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.719098][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.162832][ T30] audit: type=1326 audit(1779517374.760:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.1.718" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f051799ce59 code=0x0 [ 379.240271][ T9531] futex_wake_op: syz.0.719 tries to shift op by -2048; fix this program [ 379.288708][ T9531] futex_wake_op: syz.0.719 tries to shift op by -2048; fix this program [ 383.163168][ T30] audit: type=1326 audit(1779517378.760:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.0.733" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa35c79ce59 code=0x0 [ 385.369491][ T9626] kexec: Could not allocate control_code_buffer [ 385.849445][ T9623] Process accounting paused [ 386.781141][ T9668] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5628] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9668] [ 389.963231][ T9713] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 389.963231][ T9713] [ 390.256203][ T9713] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 392.013045][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.758'. [ 392.057632][ T9735] veth1_macvtap: entered promiscuous mode [ 392.095542][ T9735] veth1_macvtap: entered allmulticast mode [ 404.851818][ T9878] kexec: Could not allocate control_code_buffer [ 409.015582][ T30] audit: type=1326 audit(1779517404.610:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.0.792" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa35c79ce59 code=0x0 [ 412.389012][ T30] audit: type=1326 audit(1779517407.980:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9955 comm="syz.3.797" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ab1f9ce59 code=0x0 [ 414.222470][ T9999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.371545][T10021] Process accounting resumed [ 418.538907][ T5638] Process accounting resumed [ 419.095622][ T7239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 419.106017][ T7239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 419.115063][ T7239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 419.130341][ T7239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 419.138913][ T7239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.183729][ T7239] Bluetooth: hci4: command tx timeout [ 421.197752][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.812'. [ 423.263469][ T7239] Bluetooth: hci4: command tx timeout [ 423.858817][T10102] netlink: 'syz.3.818': attribute type 23 has an invalid length. [ 423.881352][T10044] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.926979][T10044] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.976062][T10044] bridge_slave_0: entered allmulticast mode [ 424.029994][T10044] bridge_slave_0: entered promiscuous mode [ 424.086740][T10044] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.143144][T10044] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.191643][T10044] bridge_slave_1: entered allmulticast mode [ 424.240320][T10044] bridge_slave_1: entered promiscuous mode [ 424.437415][T10044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.507372][T10044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.717920][T10044] team0: Port device team_slave_0 added [ 425.028412][T10044] team0: Port device team_slave_1 added [ 425.274525][T10044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.332289][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.372719][ T7239] Bluetooth: hci4: command tx timeout [ 425.510711][T10044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.616645][T10044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.662434][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.814862][T10044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.002077][T10125] FAULT_INJECTION: forcing a failure. [ 426.002077][T10125] name failslab, interval 1, probability 0, space 0, times 0 [ 426.075934][T10121] random: crng reseeded on system resumption [ 426.095724][T10125] CPU: 0 UID: 0 PID: 10125 Comm: syz.0.823 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.095771][T10125] Tainted: [L]=SOFTLOCKUP [ 426.095780][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.095795][T10125] Call Trace: [ 426.095802][T10125] [ 426.095812][T10125] dump_stack_lvl+0x100/0x190 [ 426.095842][T10125] should_fail_ex.cold+0x5/0xa [ 426.095873][T10125] should_failslab+0xc2/0x120 [ 426.095902][T10125] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 426.095942][T10125] ? vm_area_alloc+0x1f/0x160 [ 426.095983][T10125] vm_area_alloc+0x1f/0x160 [ 426.096019][T10125] __mmap_region+0x104d/0x2da0 [ 426.096062][T10125] ? __pfx___mmap_region+0x10/0x10 [ 426.096103][T10125] ? __lock_acquire+0x4a5/0x2630 [ 426.096129][T10125] ? rcu_is_watching+0x12/0xc0 [ 426.096159][T10125] ? trace_pelt_se_tp+0x13b/0x190 [ 426.096191][T10125] ? find_held_lock+0x2b/0x80 [ 426.096222][T10125] ? debug_object_activate+0x331/0x490 [ 426.096262][T10125] ? debug_object_activate+0x331/0x490 [ 426.096305][T10125] ? do_raw_spin_unlock+0x145/0x1e0 [ 426.096335][T10125] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 426.096401][T10125] ? rcu_is_watching+0x12/0xc0 [ 426.096431][T10125] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 426.096464][T10125] ? lockdep_hardirqs_on+0x78/0x100 [ 426.096536][T10125] ? futex_unqueue+0x133/0x2c0 [ 426.096571][T10125] mmap_region+0x35d/0x620 [ 426.096594][T10125] ? rcu_is_watching+0x12/0xc0 [ 426.096624][T10125] ? __pfx_mmap_region+0x10/0x10 [ 426.096650][T10125] ? cap_mmap_addr+0x4b/0x120 [ 426.096688][T10125] ? bpf_lsm_mmap_addr+0x9/0x30 [ 426.096711][T10125] ? security_mmap_addr+0x71/0x1e0 [ 426.096747][T10125] ? __get_unmapped_area+0x255/0x3e0 [ 426.096782][T10125] do_mmap+0xc63/0x12f0 [ 426.096817][T10125] ? __pfx_do_mmap+0x10/0x10 [ 426.096849][T10125] ? __pfx_down_write_killable+0x10/0x10 [ 426.096882][T10125] vm_mmap_pgoff+0x29e/0x470 [ 426.096919][T10125] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 426.096952][T10125] ? do_futex+0x192/0x350 [ 426.096980][T10125] ? __pfx_do_futex+0x10/0x10 [ 426.097011][T10125] ksys_mmap_pgoff+0xe4/0x610 [ 426.097041][T10125] ? __x64_sys_futex+0x358/0x4d0 [ 426.097069][T10125] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 426.097098][T10125] ? xfd_validate_state+0x129/0x190 [ 426.097130][T10125] __x64_sys_mmap+0x125/0x190 [ 426.097160][T10125] do_syscall_64+0x10b/0xf80 [ 426.097181][T10125] ? clear_bhb_loop+0x40/0x90 [ 426.097210][T10125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.097235][T10125] RIP: 0033:0x7fa35c79ce59 [ 426.097255][T10125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.097280][T10125] RSP: 002b:00007fa35d6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 426.097303][T10125] RAX: ffffffffffffffda RBX: 00007fa35ca15fa0 RCX: 00007fa35c79ce59 [ 426.097319][T10125] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 426.097334][T10125] RBP: 00007fa35c832d6f R08: 0000000000000002 R09: 0000000000008000 [ 426.097349][T10125] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 426.097364][T10125] R13: 00007fa35ca16038 R14: 00007fa35ca15fa0 R15: 00007ffc1d1228e8 [ 426.097394][T10125] [ 426.761667][T10044] hsr_slave_0: entered promiscuous mode [ 426.779707][T10044] hsr_slave_1: entered promiscuous mode [ 426.806113][T10044] debugfs: 'hsr0' already exists in 'hsr' [ 426.817624][T10044] Cannot create hsr debugfs directory [ 427.478565][ T7239] Bluetooth: hci4: command tx timeout [ 428.547209][T10044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 428.640025][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.683011][T10044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 428.744648][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.794199][T10044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 428.862802][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.910651][T10044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.967477][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.465165][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.573809][T10044] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.636792][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.643965][ T8022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.746584][ T7066] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.753766][ T7066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.941355][T10044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.578333][T10044] veth0_vlan: entered promiscuous mode [ 435.127248][T10044] veth1_vlan: entered promiscuous mode [ 435.318679][T10044] veth0_macvtap: entered promiscuous mode [ 435.377755][T10044] veth1_macvtap: entered promiscuous mode [ 435.863653][T10044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.922429][T10044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.252761][ T7042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.316927][ T7042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.515726][ T7042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.572202][ T7042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.805929][ T7104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.857561][ T7104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.122585][ T7104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.168295][ T7104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.831774][T10247] FAULT_INJECTION: forcing a failure. [ 439.831774][T10247] name failslab, interval 1, probability 0, space 0, times 0 [ 439.929527][T10247] CPU: 0 UID: 0 PID: 10247 Comm: syz.0.838 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.929566][T10247] Tainted: [L]=SOFTLOCKUP [ 439.929574][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 439.929588][T10247] Call Trace: [ 439.929595][T10247] [ 439.929604][T10247] dump_stack_lvl+0x100/0x190 [ 439.929640][T10247] should_fail_ex.cold+0x5/0xa [ 439.929670][T10247] should_failslab+0xc2/0x120 [ 439.929699][T10247] __kmalloc_cache_noprof+0x7a/0x6f0 [ 439.929734][T10247] ? nl80211_dump_station+0x25e/0xa80 [ 439.929772][T10247] nl80211_dump_station+0x25e/0xa80 [ 439.929810][T10247] ? __pfx_nl80211_dump_station+0x10/0x10 [ 439.929888][T10247] ? kmalloc_reserve+0xf9/0x350 [ 439.929923][T10247] ? __asan_memset+0x23/0x50 [ 439.929957][T10247] ? __alloc_skb+0x5b7/0x710 [ 439.929980][T10247] ? __pfx___alloc_skb+0x10/0x10 [ 439.930009][T10247] genl_dumpit+0x125/0x230 [ 439.930032][T10247] netlink_dump+0x532/0xd00 [ 439.930067][T10247] ? __pfx_netlink_dump+0x10/0x10 [ 439.930106][T10247] ? __asan_memset+0x23/0x50 [ 439.930139][T10247] ? genl_start+0x67a/0x970 [ 439.930182][T10247] __netlink_dump_start+0x6d6/0x990 [ 439.930221][T10247] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 439.930248][T10247] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 439.930281][T10247] ? __pfx_genl_get_cmd+0x10/0x10 [ 439.930300][T10247] ? __pfx_genl_start+0x10/0x10 [ 439.930320][T10247] ? __pfx_genl_dumpit+0x10/0x10 [ 439.930341][T10247] ? __pfx_genl_done+0x10/0x10 [ 439.930367][T10247] ? __dev_queue_xmit+0xa10/0x4950 [ 439.930388][T10247] ? __radix_tree_lookup+0x217/0x2b0 [ 439.930426][T10247] genl_rcv_msg+0x471/0x800 [ 439.930452][T10247] ? __pfx_genl_rcv_msg+0x10/0x10 [ 439.930477][T10247] ? __pfx_nl80211_dump_station+0x10/0x10 [ 439.930518][T10247] netlink_rcv_skb+0x159/0x420 [ 439.930557][T10247] ? __pfx_genl_rcv_msg+0x10/0x10 [ 439.930583][T10247] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.930636][T10247] ? netlink_deliver_tap+0x1ae/0xcc0 [ 439.930675][T10247] genl_rcv+0x28/0x40 [ 439.930695][T10247] netlink_unicast+0x585/0x850 [ 439.930734][T10247] ? __pfx_netlink_unicast+0x10/0x10 [ 439.930779][T10247] netlink_sendmsg+0x8b0/0xda0 [ 439.930821][T10247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.930855][T10247] ? __import_iovec+0x1d2/0x640 [ 439.930884][T10247] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 439.930927][T10247] ____sys_sendmsg+0x9e1/0xb70 [ 439.930963][T10247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.931022][T10247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.931066][T10247] ? __pfx_futex_wake_mark+0x10/0x10 [ 439.931103][T10247] ___sys_sendmsg+0x190/0x1e0 [ 439.931143][T10247] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.931218][T10247] __sys_sendmsg+0x170/0x220 [ 439.931248][T10247] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.931278][T10247] ? __x64_sys_futex+0x34f/0x4d0 [ 439.931316][T10247] ? rcu_is_watching+0x12/0xc0 [ 439.931349][T10247] do_syscall_64+0x10b/0xf80 [ 439.931370][T10247] ? clear_bhb_loop+0x40/0x90 [ 439.931399][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.931424][T10247] RIP: 0033:0x7fa35c79ce59 [ 439.931444][T10247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.931468][T10247] RSP: 002b:00007fa35d6a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.931491][T10247] RAX: ffffffffffffffda RBX: 00007fa35ca15fa0 RCX: 00007fa35c79ce59 [ 439.931507][T10247] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 439.931522][T10247] RBP: 00007fa35c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 439.931536][T10247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.931551][T10247] R13: 00007fa35ca16038 R14: 00007fa35ca15fa0 R15: 00007ffc1d1228e8 [ 439.931581][T10247] [ 440.862737][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.874770][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.550689][T10275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.290959][ T7066] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.570282][ T7066] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.967907][ T7066] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.377191][ T7066] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.301149][ T7066] bridge_slave_1: left allmulticast mode [ 448.350745][ T7066] bridge_slave_1: left promiscuous mode [ 448.400644][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.502736][ T7066] bridge_slave_0: left allmulticast mode [ 448.555847][ T7066] bridge_slave_0: left promiscuous mode [ 448.606900][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.809297][T10338] Process accounting paused [ 449.751931][ T7066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.835304][ T7066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.878351][ T7066] bond0 (unregistering): Released all slaves [ 450.141541][T10344] FAULT_INJECTION: forcing a failure. [ 450.141541][T10344] name failslab, interval 1, probability 0, space 0, times 0 [ 450.232809][T10344] CPU: 0 UID: 0 PID: 10344 Comm: syz.3.853 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.232859][T10344] Tainted: [L]=SOFTLOCKUP [ 450.232867][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.232882][T10344] Call Trace: [ 450.232889][T10344] [ 450.232898][T10344] dump_stack_lvl+0x100/0x190 [ 450.232928][T10344] should_fail_ex.cold+0x5/0xa [ 450.232960][T10344] should_failslab+0xc2/0x120 [ 450.232990][T10344] __kmalloc_cache_noprof+0x7a/0x6f0 [ 450.233026][T10344] ? nl80211_dump_station+0x25e/0xa80 [ 450.233065][T10344] nl80211_dump_station+0x25e/0xa80 [ 450.233104][T10344] ? __pfx_nl80211_dump_station+0x10/0x10 [ 450.233173][T10344] ? kmalloc_reserve+0xf9/0x350 [ 450.233211][T10344] ? __asan_memset+0x23/0x50 [ 450.233249][T10344] ? __alloc_skb+0x5b7/0x710 [ 450.233276][T10344] ? __pfx___alloc_skb+0x10/0x10 [ 450.233308][T10344] genl_dumpit+0x125/0x230 [ 450.233335][T10344] netlink_dump+0x532/0xd00 [ 450.233376][T10344] ? __pfx_netlink_dump+0x10/0x10 [ 450.233421][T10344] ? __asan_memset+0x23/0x50 [ 450.233458][T10344] ? genl_start+0x67a/0x970 [ 450.233485][T10344] __netlink_dump_start+0x6d6/0x990 [ 450.233526][T10344] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 450.233555][T10344] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 450.233589][T10344] ? __pfx_genl_get_cmd+0x10/0x10 [ 450.233610][T10344] ? __pfx_genl_start+0x10/0x10 [ 450.233631][T10344] ? __pfx_genl_dumpit+0x10/0x10 [ 450.233654][T10344] ? __pfx_genl_done+0x10/0x10 [ 450.233680][T10344] ? __dev_queue_xmit+0xa10/0x4950 [ 450.233703][T10344] ? __radix_tree_lookup+0x217/0x2b0 [ 450.233743][T10344] genl_rcv_msg+0x471/0x800 [ 450.233771][T10344] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.233797][T10344] ? __pfx_nl80211_dump_station+0x10/0x10 [ 450.233845][T10344] netlink_rcv_skb+0x159/0x420 [ 450.233883][T10344] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.233910][T10344] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.233960][T10344] ? netlink_deliver_tap+0x1ae/0xcc0 [ 450.234001][T10344] genl_rcv+0x28/0x40 [ 450.234022][T10344] netlink_unicast+0x585/0x850 [ 450.234064][T10344] ? __pfx_netlink_unicast+0x10/0x10 [ 450.234111][T10344] netlink_sendmsg+0x8b0/0xda0 [ 450.234154][T10344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.234190][T10344] ? __import_iovec+0x1d2/0x640 [ 450.234221][T10344] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 450.234266][T10344] ____sys_sendmsg+0x9e1/0xb70 [ 450.234302][T10344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.234343][T10344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.234386][T10344] ? __pfx_futex_wake_mark+0x10/0x10 [ 450.234424][T10344] ___sys_sendmsg+0x190/0x1e0 [ 450.234466][T10344] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.234540][T10344] __sys_sendmsg+0x170/0x220 [ 450.234571][T10344] ? __pfx___sys_sendmsg+0x10/0x10 [ 450.234601][T10344] ? __x64_sys_futex+0x34f/0x4d0 [ 450.234639][T10344] ? rcu_is_watching+0x12/0xc0 [ 450.234673][T10344] do_syscall_64+0x10b/0xf80 [ 450.234695][T10344] ? clear_bhb_loop+0x40/0x90 [ 450.234725][T10344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.234750][T10344] RIP: 0033:0x7f4ab1f9ce59 [ 450.234770][T10344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.234794][T10344] RSP: 002b:00007f4ab2ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.234817][T10344] RAX: ffffffffffffffda RBX: 00007f4ab2215fa0 RCX: 00007f4ab1f9ce59 [ 450.234839][T10344] RDX: 000000000000f000 RSI: 0000200000000040 RDI: 0000000000000006 [ 450.234854][T10344] RBP: 00007f4ab2032d6f R08: 0000000000000000 R09: 0000000000000000 [ 450.234869][T10344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.234883][T10344] R13: 00007f4ab2216038 R14: 00007f4ab2215fa0 R15: 00007fff1f11e318 [ 450.234914][T10344] [ 451.382897][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 451.527355][T10379] FAULT_INJECTION: forcing a failure. [ 451.527355][T10379] name fail_futex, interval 1, probability 0, space 0, times 0 [ 451.614841][T10379] CPU: 0 UID: 0 PID: 10379 Comm: syz.4.857 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.614879][T10379] Tainted: [L]=SOFTLOCKUP [ 451.614888][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.614903][T10379] Call Trace: [ 451.614911][T10379] [ 451.614919][T10379] dump_stack_lvl+0x100/0x190 [ 451.614950][T10379] should_fail_ex.cold+0x5/0xa [ 451.614980][T10379] get_futex_key+0x1d2/0x1510 [ 451.615009][T10379] ? __pfx_get_futex_key+0x10/0x10 [ 451.615037][T10379] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.615082][T10379] futex_wake+0xea/0x530 [ 451.615116][T10379] ? __pfx_futex_wake+0x10/0x10 [ 451.615161][T10379] do_futex+0x32b/0x350 [ 451.615188][T10379] ? __pfx_do_futex+0x10/0x10 [ 451.615215][T10379] ? fput+0x79/0x100 [ 451.615249][T10379] ? __sys_sendmsg+0x18f/0x220 [ 451.615281][T10379] __x64_sys_futex+0x34f/0x4d0 [ 451.615313][T10379] ? __pfx___x64_sys_futex+0x10/0x10 [ 451.615345][T10379] ? rcu_is_watching+0x12/0xc0 [ 451.615379][T10379] do_syscall_64+0x10b/0xf80 [ 451.615401][T10379] ? clear_bhb_loop+0x40/0x90 [ 451.615430][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.615455][T10379] RIP: 0033:0x7f3f7699ce59 [ 451.615473][T10379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.615497][T10379] RSP: 002b:00007f3f777e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 451.615520][T10379] RAX: ffffffffffffffda RBX: 00007f3f76c15fa8 RCX: 00007f3f7699ce59 [ 451.615536][T10379] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3f76c15fac [ 451.615551][T10379] RBP: 00007f3f76c15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 451.615565][T10379] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000000 [ 451.615579][T10379] R13: 00007f3f76c16038 R14: 00007fff79a78e00 R15: 00007fff79a78ee8 [ 451.615609][T10379] [ 452.469222][ T30] audit: type=1326 audit(1779535792.023:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.0.856" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa35c79ce59 code=0x0 [ 453.588179][ T7066] hsr_slave_0: left promiscuous mode [ 453.669153][ T7066] hsr_slave_1: left promiscuous mode [ 453.700339][ T7066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.760880][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.880086][ T7066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.940192][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.870016][ T7066] team0 (unregistering): Port device team_slave_1 removed [ 454.948354][ T7066] team0 (unregistering): Port device team_slave_0 removed [ 455.455448][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 456.826395][T10452] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 457.908397][T10471] FAULT_INJECTION: forcing a failure. [ 457.908397][T10471] name fail_futex, interval 1, probability 0, space 0, times 0 [ 458.000053][T10471] CPU: 0 UID: 0 PID: 10471 Comm: syz.3.868 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.000100][T10471] Tainted: [L]=SOFTLOCKUP [ 458.000108][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 458.000124][T10471] Call Trace: [ 458.000131][T10471] [ 458.000140][T10471] dump_stack_lvl+0x100/0x190 [ 458.000172][T10471] should_fail_ex.cold+0x5/0xa [ 458.000202][T10471] get_futex_key+0x1d2/0x1510 [ 458.000232][T10471] ? __pfx_get_futex_key+0x10/0x10 [ 458.000254][T10471] ? do_raw_spin_lock+0x128/0x260 [ 458.000282][T10471] ? find_held_lock+0x2b/0x80 [ 458.000317][T10471] ? lock_acquire+0x1b1/0x370 [ 458.000343][T10471] futex_wake+0xea/0x530 [ 458.000377][T10471] ? __pfx_futex_wake+0x10/0x10 [ 458.000410][T10471] ? rcu_is_watching+0x12/0xc0 [ 458.000449][T10471] do_futex+0x32b/0x350 [ 458.000477][T10471] ? __pfx_do_futex+0x10/0x10 [ 458.000511][T10471] __x64_sys_futex+0x34f/0x4d0 [ 458.000542][T10471] ? __pfx___x64_sys_futex+0x10/0x10 [ 458.000574][T10471] ? rcu_is_watching+0x12/0xc0 [ 458.000607][T10471] do_syscall_64+0x10b/0xf80 [ 458.000629][T10471] ? clear_bhb_loop+0x40/0x90 [ 458.000658][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.000683][T10471] RIP: 0033:0x7f4ab1f9ce59 [ 458.000701][T10471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.000725][T10471] RSP: 002b:00007f4ab2ed10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 458.000748][T10471] RAX: ffffffffffffffda RBX: 00007f4ab2215fa8 RCX: 00007f4ab1f9ce59 [ 458.000764][T10471] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4ab2215fac [ 458.000779][T10471] RBP: 00007f4ab2215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 458.000793][T10471] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 458.000808][T10471] R13: 00007f4ab2216038 R14: 00007fff1f11e230 R15: 00007fff1f11e318 [ 458.000837][T10471] [ 460.796450][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 463.168542][ T8840] ------------[ cut here ]------------ [ 463.174181][ T8840] ODEBUG: free active (active state 0) object: ffff888037349438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 463.187501][ T8840] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.0.594/8840 [ 463.197956][ T8840] Modules linked in: [ 463.201891][ T8840] CPU: 0 UID: 0 PID: 8840 Comm: syz.0.594 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.212756][ T8840] Tainted: [L]=SOFTLOCKUP [ 463.217281][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.228838][ T8840] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 463.236350][ T8840] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d2 8c e2 0b 41 56 48 8b 14 dd 40 53 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ec 07 d8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 463.256065][ T8840] RSP: 0018:ffffc900034b76f8 EFLAGS: 00010246 [ 463.262170][ T8840] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 463.270264][ T8840] RDX: ffffffff8c1c5280 RSI: ffffffff8c1c4ea0 RDI: ffffffff90e2c7a0 [ 463.278325][ T8840] RBP: 0000000000000001 R08: ffff888037349438 R09: ffffffff8bb2c700 [ 463.286548][ T8840] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c4ea0 [ 463.294645][ T8840] R13: ffffffff8bb2c740 R14: ffffffff8a933520 R15: ffffc900034b77f8 [ 463.302631][ T8840] FS: 0000000000000000(0000) GS:ffff888124371000(0000) knlGS:0000000000000000 [ 463.311968][ T8840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.318600][ T8840] CR2: 00005654ca1d5fd8 CR3: 00000000358dc000 CR4: 00000000003526f0 [ 463.326622][ T8840] Call Trace: [ 463.331112][ T8840] [ 463.334854][ T8840] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 463.340378][ T8840] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 463.346296][ T8840] debug_check_no_obj_freed+0x4da/0x630 [ 463.351864][ T8840] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 463.357967][ T8840] ? __page_table_check_zero+0x333/0x410 [ 463.363679][ T8840] ? __page_table_check_zero+0x333/0x410 [ 463.369342][ T8840] ? __page_table_check_zero+0x338/0x410 [ 463.375044][ T8840] __free_frozen_pages+0x3f5/0x1040 [ 463.380271][ T8840] hci_release_dev+0x4ef/0x630 [ 463.385092][ T8840] ? __pfx_hci_release_dev+0x10/0x10 [ 463.390399][ T8840] ? device_release+0x97/0x270 [ 463.395213][ T8840] ? rcu_is_watching+0x12/0xc0 [ 463.400010][ T8840] ? device_release+0x97/0x270 [ 463.404844][ T8840] bt_host_release+0x6a/0xb0 [ 463.409448][ T8840] ? __pfx_bt_host_release+0x10/0x10 [ 463.414781][ T8840] device_release+0xd2/0x270 [ 463.419399][ T8840] kobject_put+0x1f7/0x640 [ 463.423872][ T8840] put_device+0x1f/0x30 [ 463.428044][ T8840] vhci_release+0x185/0x230 [ 463.433827][ T8840] ? __pfx_vhci_release+0x10/0x10 [ 463.438903][ T8840] __fput+0x3ff/0xb50 [ 463.442915][ T8840] task_work_run+0x150/0x240 [ 463.448296][ T8840] ? __pfx_task_work_run+0x10/0x10 [ 463.453482][ T8840] do_exit+0x951/0x2af0 [ 463.457673][ T8840] ? __pfx_do_exit+0x10/0x10 [ 463.462296][ T8840] ? cgroup_update_frozen_flag+0x107/0x210 [ 463.468180][ T8840] ? find_held_lock+0x2b/0x80 [ 463.472878][ T8840] ? get_signal+0x1872/0x2210 [ 463.477634][ T8840] do_group_exit+0xd5/0x2a0 [ 463.482177][ T8840] get_signal+0x20ff/0x2210 [ 463.486750][ T8840] ? __pfx_get_signal+0x10/0x10 [ 463.491643][ T8840] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 463.497204][ T8840] arch_do_signal_or_restart+0x91/0x7a0 [ 463.502825][ T8840] ? get_timespec64+0x136/0x1b0 [ 463.507867][ T8840] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 463.514125][ T8840] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 463.519965][ T8840] ? rcu_is_watching+0x12/0xc0 [ 463.524804][ T8840] exit_to_user_mode_loop+0x8b/0x4f0 [ 463.530102][ T8840] ? rcu_is_watching+0x12/0xc0 [ 463.536160][ T8840] do_syscall_64+0x6f2/0xf80 [ 463.541538][ T8840] ? clear_bhb_loop+0x40/0x90 [ 463.546312][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.552251][ T8840] RIP: 0033:0x7fa35c75d68e [ 463.556724][ T8840] Code: Unable to access opcode bytes at 0x7fa35c75d664. [ 463.563788][ T8840] RSP: 002b:00007fa35d6a4f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 463.572216][ T8840] RAX: fffffffffffffdfc RBX: 00007fa35d6a56c0 RCX: 00007fa35c75d68e [ 463.580244][ T8840] RDX: 00007fa35d6a4fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.588450][ T8840] RBP: 00007fa35c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 463.596478][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.604698][ T8840] R13: 00007fa35ca16038 R14: 00007fa35ca15fa0 R15: 00007ffc1d1228e8 [ 463.612694][ T8840] [ 463.615762][ T8840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 463.623058][ T8840] CPU: 0 UID: 0 PID: 8840 Comm: syz.0.594 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.633858][ T8840] Tainted: [L]=SOFTLOCKUP [ 463.638189][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.648252][ T8840] Call Trace: [ 463.651538][ T8840] [ 463.654491][ T8840] dump_stack_lvl+0x100/0x190 [ 463.659185][ T8840] vpanic+0x552/0x970 [ 463.663180][ T8840] ? __pfx_vpanic+0x10/0x10 [ 463.667703][ T8840] panic+0xd1/0xe0 [ 463.671441][ T8840] ? __pfx_panic+0x10/0x10 [ 463.675874][ T8840] ? check_panic_on_warn+0x1f/0x90 [ 463.680994][ T8840] check_panic_on_warn.cold+0x19/0x34 [ 463.686397][ T8840] ? debug_print_object+0x18e/0x2a0 [ 463.691633][ T8840] __warn.cold+0x191/0x328 [ 463.696071][ T8840] __report_bug+0x296/0x3d0 [ 463.700630][ T8840] ? debug_print_object+0x18e/0x2a0 [ 463.705895][ T8840] ? __pfx___report_bug+0x10/0x10 [ 463.711051][ T8840] ? unwind_next_frame+0x3c8/0x2090 [ 463.716281][ T8840] report_bug_entry+0xe1/0x290 [ 463.721084][ T8840] ? debug_print_object+0x19b/0x2a0 [ 463.726309][ T8840] handle_bug+0x1cd/0x2a0 [ 463.730658][ T8840] exc_invalid_op+0x17/0x50 [ 463.735176][ T8840] asm_exc_invalid_op+0x1a/0x20 [ 463.740042][ T8840] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 463.745897][ T8840] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d2 8c e2 0b 41 56 48 8b 14 dd 40 53 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ec 07 d8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 463.765535][ T8840] RSP: 0018:ffffc900034b76f8 EFLAGS: 00010246 [ 463.771615][ T8840] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 463.779701][ T8840] RDX: ffffffff8c1c5280 RSI: ffffffff8c1c4ea0 RDI: ffffffff90e2c7a0 [ 463.787683][ T8840] RBP: 0000000000000001 R08: ffff888037349438 R09: ffffffff8bb2c700 [ 463.795666][ T8840] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c4ea0 [ 463.803648][ T8840] R13: ffffffff8bb2c740 R14: ffffffff8a933520 R15: ffffc900034b77f8 [ 463.811631][ T8840] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 463.817126][ T8840] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 463.822615][ T8840] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 463.828449][ T8840] debug_check_no_obj_freed+0x4da/0x630 [ 463.834015][ T8840] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 463.840091][ T8840] ? __page_table_check_zero+0x333/0x410 [ 463.845743][ T8840] ? __page_table_check_zero+0x333/0x410 [ 463.851400][ T8840] ? __page_table_check_zero+0x338/0x410 [ 463.857227][ T8840] __free_frozen_pages+0x3f5/0x1040 [ 463.862453][ T8840] hci_release_dev+0x4ef/0x630 [ 463.867237][ T8840] ? __pfx_hci_release_dev+0x10/0x10 [ 463.872544][ T8840] ? device_release+0x97/0x270 [ 463.877421][ T8840] ? rcu_is_watching+0x12/0xc0 [ 463.882203][ T8840] ? device_release+0x97/0x270 [ 463.886995][ T8840] bt_host_release+0x6a/0xb0 [ 463.891596][ T8840] ? __pfx_bt_host_release+0x10/0x10 [ 463.896908][ T8840] device_release+0xd2/0x270 [ 463.901526][ T8840] kobject_put+0x1f7/0x640 [ 463.905978][ T8840] put_device+0x1f/0x30 [ 463.910161][ T8840] vhci_release+0x185/0x230 [ 463.914717][ T8840] ? __pfx_vhci_release+0x10/0x10 [ 463.919770][ T8840] __fput+0x3ff/0xb50 [ 463.923801][ T8840] task_work_run+0x150/0x240 [ 463.928410][ T8840] ? __pfx_task_work_run+0x10/0x10 [ 463.933546][ T8840] do_exit+0x951/0x2af0 [ 463.937763][ T8840] ? __pfx_do_exit+0x10/0x10 [ 463.942388][ T8840] ? cgroup_update_frozen_flag+0x107/0x210 [ 463.948220][ T8840] ? find_held_lock+0x2b/0x80 [ 463.952916][ T8840] ? get_signal+0x1872/0x2210 [ 463.957615][ T8840] do_group_exit+0xd5/0x2a0 [ 463.962145][ T8840] get_signal+0x20ff/0x2210 [ 463.966675][ T8840] ? __pfx_get_signal+0x10/0x10 [ 463.971631][ T8840] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 463.977117][ T8840] arch_do_signal_or_restart+0x91/0x7a0 [ 463.982701][ T8840] ? get_timespec64+0x136/0x1b0 [ 463.987727][ T8840] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 463.993958][ T8840] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 463.999795][ T8840] ? rcu_is_watching+0x12/0xc0 [ 464.004594][ T8840] exit_to_user_mode_loop+0x8b/0x4f0 [ 464.009915][ T8840] ? rcu_is_watching+0x12/0xc0 [ 464.014700][ T8840] do_syscall_64+0x6f2/0xf80 [ 464.019313][ T8840] ? clear_bhb_loop+0x40/0x90 [ 464.024008][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.029915][ T8840] RIP: 0033:0x7fa35c75d68e [ 464.034339][ T8840] Code: Unable to access opcode bytes at 0x7fa35c75d664. [ 464.041356][ T8840] RSP: 002b:00007fa35d6a4f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 464.049879][ T8840] RAX: fffffffffffffdfc RBX: 00007fa35d6a56c0 RCX: 00007fa35c75d68e [ 464.057867][ T8840] RDX: 00007fa35d6a4fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 464.065862][ T8840] RBP: 00007fa35c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 464.073850][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.081838][ T8840] R13: 00007fa35ca16038 R14: 00007fa35ca15fa0 R15: 00007ffc1d1228e8 [ 464.089850][ T8840] [ 464.092961][ T8840] Kernel Offset: disabled [ 464.097304][ T8840] Rebooting in 86400 seconds..